there should be an "allow blank" condition associated with this validation. the oauth gods will be angry.