bug fix: access plugin without session.siteid