Revocation endpoint should return empty string, not Python 'None'