Fix the error handling path so that it won't hand back an output

Fix the error handling path so that it won't hand back an output
token from the previous round if this round fails, and so that the
filter won't do anything if we received a request from a non gssweb
client (we don't have an output token or a valid nonce).