CheckAccess Fix + basePath, baseUrl for non @webroot locations