If you find you can log in to ebase v. 2.20 (or prior) with no account name and no password, it's because you have a user account with these same settings. Go into Admin -> Users and delete the bogus account record.
Thanks to Joyce McDonald for reporting this bug, and to Dave Shaw for finding the cause!