fixed undefined app variable
start server even if there are no graphs to load
allow access control graph to be null