Fix: session is always started for legacy_mode SiteAccess