#JC-1743: Allowed non secured access to errors and user avatars. Added null condition checking into haspermission tag