Make sure to return something, even if the auth processor returns null.