In non-secure mode the username password validation fails since the values are blank, which is valid for non-secure.