authentication handler doesn't support empty passwords

[shlomibs]

In _default_auth_request_handler() function, empty passwords are filtered out by the criterion = [username, password, len(data) == 2] list. This can be easily solved by changing the password criteria to password is not None