Person.authenticate properly handles blank email