use client_id when user_id is missing from token

UAA 1.4.1 will remove user_id from tokens that represent clients. This change allows cloud controller to still function the same.

- Eugenia & Sheel