allow clearing secret in client

client/remote.go

@@ -52,6 +52,12 @@ func (r *Remote) Handshake() error {
 
 // Secret authenticates and sets secret.
 func (r *Remote) Secret(secret string) (api.UserPayload, bool) {
+	// Clear secret if empty
+	if secret == "" {
+		r.secret = secret
+		return api.UserPayload{}, true
+	}
+
 	prev := r.secret
 	r.secret = secret
 	if user, err := r.This(); err != nil {