fix nil list on auth policy rest model, fixes #1584

[andrewpmartinez]

Some languages do not equate nil/null with empty list or list types.