Fix pubkey-first auth attempts.

Previously, once a pubkey was attempted, you could not use a password.