SECURITY FIX: User removed from a team still has access to pages if defaultTeam defined in DB