Avoid loading the plugin definition for all requests

Avoid loading the plugin definition for all requests The OAuth2 authentication plugin tries to load the plugin as part of `applies()` check, even if a plugin id cannot be determined. This change makes sure there is a plugin id before trying to load.