userman: prevent session activation and stall on sudden page reload/crash

fix 388441b36b440b5e32e0c3bc13670d5a88651017
rbac modules: do not dereference bad stuff

fix 7c44a6ed9a0829f519408ae46528caf0086e5bd5