Bugfix for when allowedPrincipals == null

If there are no restrictions on the allowed users all users should be granted access.
Before none were granted access. Changed comparison to reflect this.