don't crash if client provides NULL authid