Remove basic auth password requirement.

There isn't a strict requirement for a password, since the basic auth token can be computed regardless. It's also my understanding authentication using basic auth relying solely on an API key is fairly common.