check base64 decoded Authorization

For Authorization:3 header .blank? check will return false but Base64.decode will return empty string.
it will cause passing two nils into login_procedure block
we should check .blank? on decoded value too.