Fixed bug noticed by JF. se_access_check needs user SID as first in token.