fixed error on null ARO sent to permission check

fixed error where the user session is cleared out due to inactivity and
the permission check returns an error because of empty ARO the next time
a page is refreshed