added not for status when not using database for sessions
changed allow_private_without_permission back to default of false