This might be related?
In my sites, the password works fine, but it it’s mis-entered or blank, you’ll get a 404.