Fix Acl when no session is provided