Correct second 'or' check to look for an empty token secret