* fix(auth): dont reject promise when missing password * fix(auth): use static fallback error message