Handle empty password as auth failure