Add tests & fixes for unconfigured access control

Fixes #126