authenticate: empty user/password bugfix

When pass an empty user/password the callback must be passed with an error. But it's not defined.