AppCmp: updated new logic for 'require_role' with session check

Temp workaround. See in-code comments for more details