Made callback methods for password auth methods optional

Bumped version to 1.6.3
I think you also have to flip the "optional" flag to validateCallback() from false to true.