So the module does require a user/pass, correct? Does it allow an empty cred, too? Because if you set ```""``` as the default, you're basically saying it's ok to send an empty user/pass to auth.