Redirect to log in for empty sessions
Fixed access control