Password login returns an empty response with a 400 or 200 HTTP response code.