The bearer token can be NULL but not blank

NULL has the special meaning of "there isn't one". We don't want to be
able to accidentially set an empty bearer token, so it mustn't be blank.