I faced this couple of times. I go mad when I am working with Auth component and I wonder why the password is being sent as a blank one. I did not investigate into it completely but one thing that you need to do for sure is to remove the security salt value in cakephp core.php file. Then it works fine. I have to work with changing the hashing method too. I will modify this post after gaining complete knowledge about it.