diff --git a/lib/plugins/authorization.js b/lib/plugins/authorization.js
index 25784de6c..60008a3f5 100644
--- a/lib/plugins/authorization.js
+++ b/lib/plugins/authorization.js
@@ -39,9 +39,13 @@ function parseBasic(string) {
     pieces = [decoded.slice(0, index), decoded.slice(index + 1)];
   }
 
-  if (!pieces || !pieces[0] || !pieces[1])
+  if (!pieces || !pieces[0])
     throw new InvalidHeaderError('Authorization header invalid');
 
+  // Allows for passwordless authentication 
+  if (!pieces[1])
+    pieces[1] = null;
+      
   return {
     username: pieces[0],
     password: pieces[1]
diff --git a/lib/plugins/multipart_parser.js b/lib/plugins/multipart_parser.js
index e75d3cd08..42154a5b6 100644
--- a/lib/plugins/multipart_parser.js
+++ b/lib/plugins/multipart_parser.js
@@ -41,6 +41,7 @@ function multipartBodyParser(options) {
         return next(new BadRequestError(err.toString()));
 
       req.body = fields;
+      req.files = files;
 
       if (options.mapParams !== false) {
         Object.keys(fields).forEach(function (k) {