fix null ptr on undecodable auth token
Merge branch 'master' of github.com:tetrapods/core
turn security back on again