Advisories for Gem/Adauth package

Users are able to log themselves in with a blank password, even for users who are NOT currently in the users table (ie have never previously logged in).