compatibility: userauth("", options)

* improve ctx.session not exists case