Document curl_httpclient empty password fix.

Accept None as auth_password in simple_httpclient for consistency with
curl_httpclient.

tornado/simple_httpclient.py

@@ -257,7 +257,7 @@ class _HTTPConnection(object):
             username, password = parsed.username, parsed.password
         elif self.request.auth_username is not None:
             username = self.request.auth_username
-            password = self.request.auth_password
+            password = self.request.auth_password or ''
         if username is not None:
             auth = utf8(username) + b(":") + utf8(password)
             self.request.headers["Authorization"] = (b("Basic ") +

website/sphinx/releases/next.rst

@@ -32,6 +32,8 @@ Backwards-incompatible changes
   responses with no content, or empty ``POST``/``PUT`` response bodies.
 * `SimpleAsyncHTTPClient` now supports 303 and 307 redirect codes.
 * `tornado.curl_httpclient` now accepts non-integer timeouts.
+* `tornado.curl_httpclient` now supports basic authentication with an
+  empty password.
 
 ``tornado.httpserver``
 ~~~~~~~~~~~~~~~~~~~~~~