[5.6] Default to an empty string when validating the signature hash query parameter

[hmazter]

This PR is a follow up to #23618 fixing the problem explained in #23618 (comment)

When validating a signature and the signature query param is not present in the request, hash_equals will throw an ErrorException since it expects a string to compare but $request->query('signature') will return null