EBS Auth & client credentials

Define empty? No JSON at all? Or an empty object?

Do you test the HTTP Response code for a non 200?