You can request with a blank token.

https://github.com/lepture/flask-oauthlib/pull/121
Added note about session overriding on client docs