upnp: fix crash when upnp_server was NULL