Empty string audience claim should be deserialized as empty string

[jimmyjames]

Changes

Fixes #662 - an empty audience string was being deserialized as an empty list, instead of a list with an empty string.