fix client auth for no password

All clients are authorized if the server lacks a password.