A password piped with a Windows line ending was hashed with the trailing \r, so basic_auth rejected the real password, and input without a final newline failed with EOF.