luci-base: properly handle authentication without authenticator