Fix auth checking for `requiresCode`.

`auth.username` was being checked twice where the second check
should be `auth.password`.
Don't throw error at the end: callback handles it.

The Node callback style is to pass an error as the first arg to
a callback, which we are doing anyway, so throwing an error before
that is pointless and forces the callee to handle both returned
and thrown errors.