model.getClient() allows passing in null clientSecret (search for client...

... is performed in this case based solely on clientId). This follows the main readme.md description.
See discussion in https://github.com/thomseddon/node-oauth2-server/commit/0511416f568e5517e692e17c696615fdbc8bc517#commitcomment-6775067