Scripts assume that calling user.compare_ars(undefined) will not throw

... an exception (e.g. chat_sec.js), so return false instead.

This fixes issue #864

Thank you Accession and Nelgin for the report