Fix a weird case were updateAdminRights() can actually trigger the repository list loading BEFORE user is stored in the session, and create an empty repository list.