support empty client_secret in the Authorization header
Merge pull request #3 from nulab/support-empty-client-secret

support empty client_secret in the Authorization header