ENG-7058: Don't count authentication attempts with empty credentials as failed attempts.

So that subsequent successful attempts won't be rejected because of the rate-limit.
I thought about that, but hen closing the client has to be copy/pasted. Maybe that's better?