Fix empty username auth bypass bug

HTTP Digest authentication could be bypassed by logging in with an empty username and password