session: handle NULL return values of crypt()