diff --git a/ChangeLog.md b/ChangeLog.md
index 19eb6ca..94d6601 100644
--- a/ChangeLog.md
+++ b/ChangeLog.md
@@ -1,4 +1,8 @@
 # Change Log
+## [0.2.8] TBD
+### Changes
+- Fixes issue if no password is entered, browser must be closed and restart to attempt to re-auth. See issue [#118](../../issues/118). Thanks @smilesm2 for the idea.
+
 ## [0.2.7] 2018-11-11
 ### Changes
 - `config.reauth` was not respected if initial auth presented was incorrect, regardless of `reauth` setting in `config.json` reauth would always be attempted. fixes [#117](../../issues/117) 
diff --git a/app/package.json b/app/package.json
index a06af89..7732652 100644
--- a/app/package.json
+++ b/app/package.json
@@ -1,6 +1,6 @@
 {
   "name": "webssh2",
-  "version": "0.2.7",
+  "version": "0.2.8",
   "ignore": [
     ".gitignore"
   ],
diff --git a/app/server/util.js b/app/server/util.js
index 13a258d..a3ea940 100644
--- a/app/server/util.js
+++ b/app/server/util.js
@@ -9,7 +9,7 @@ var Auth = require('basic-auth')
 
 exports.basicAuth = function basicAuth (req, res, next) {
   var myAuth = Auth(req)
-  if (myAuth) {
+  if (myAuth && myAuth.pass !== '') {
     req.session.username = myAuth.name
     req.session.userpassword = myAuth.pass
     debug('myAuth.name: ' + myAuth.name.yellow.bold.underline +