Use real user to generate acl's
Remove impersonation on logout