Tshprecher/allow empty token two legged

Allow empty strings as tokens in oauth 2-legged requests.