Allow empty passwords when parsing Basic authorization header
Merge remote-tracking branch 'origin/fix/basic-auth-empty-password'
Use the soundrop cowlib fork