Optional Server Password

Hi @vladikoff,

I've cleaned up and centralized some of the password logic here, and also made the password optional (e.g. empty password string conf is now treated as no password here).

cc @jamesreggio
Actually—I'm mistaken. The `basicAuth` middleware will cause a prompt to the client.