Don't return null, return what we got.

This is a filter, so we shouldn’t reject something that may be at a
higher filter priority than us.
Let's strip out all non-alphanumerics

This will let a user input their app password with spaces to make it
more readable, but still accept the result.