Allow Basic Auth to work without a username. Specs.