FIX: httpCheckSecurityToken for NULL vs empty.