deny auth for blank password w/ ldap (previously just dumped)