If no or null password, auth string will not include :password.