Allow access to the API if not root password has been set

Requested by:	jkh
Do not treat passwordless API auth as webclient