Fixes security issue where auto_filter returned nil instead of proper filter expressions, which could lead to incorrect authorization behavior.