properly handle null expressions in SAST
add tests proving null variables work!