Removing the 'rules' and 'facts' in RuleBasedPermissionResolver from the session