Bug 799729 - Let HMAC extra parameter be the empty string.

This is against the spec (!), but seems natural to me.  It is accepted
by existing Mozilla Services server implementations, including the
token server.
Bug 799729 - Let HMAC extra parameter be the empty string. r=rnewman