add additional checking of payload

Author: dmkit

src/Phalcon/Auth/Auth.php

@@ -57,7 +57,7 @@ public function check(TokenGetter $parser, string $key)  : bool
 		}
 
 		$payload = $this->decode($token, $key);
-		if(!$payload) {
+		if(!$payload || empty($payload)) {
 			return false;
 		}