fixed wrong usage of the HasAccess controller plugin