fixes #1303: Security::decrypt now returns null w/o error when null is passed as $data