Change OClassTrigger to first position. 

If want to customize the restricted access check logic, the OClassTrigger have to be execute first, otherwise ORestrictedAccessHook will be execute first and may skip the rest of hook.