A regression was introduced into 3.0.1 where users are prompted with a password prompt in the web server whenever the localhost exception does not apply.

Fixed by adding a check to see if auth is enabled on the server.