fixed crash when bogus payload (auth_data == NULL) was received.