"Players can log in with an empty (or otherwise invalid) username/password"