fixes #134 - allows for client_secret to be empty in post body if the client secret is an empty string