allows for null client_secret from getClientCredentials function (as discussed in https://github.com/bshaffer/oauth2-server-php/pull/277/files#diff-756f723f587f0504239170eff6eaade8R40)