Hi Jason,
I am having the same problem, only worse.
You can log in with a blank username and password, but you can also use a username and password that isn't in the database and it will still log you in.
Is there a bug in this MySQLi user authentication module?
I have attached the page for you to look at.