diff --git a/src/server.js b/src/server.js
index 5277f96d2..0cb7bec30 100644
--- a/src/server.js
+++ b/src/server.js
@@ -5,8 +5,7 @@ exports = module.exports = {
     stop: stop
 };
 
-var accesscontrol = require('./accesscontrol.js'),
-    assert = require('assert'),
+let assert = require('assert'),
     async = require('async'),
     cloudron = require('./cloudron.js'),
     constants = require('./constants.js'),
@@ -226,7 +225,7 @@ function initializeExpressSync() {
     router.get ('/api/v1/apps/:id/logs',      token, authorizeAdmin, routes.apps.getLogs);
     router.get ('/api/v1/apps/:id/exec',      token, authorizeAdmin, routes.apps.exec);
     // websocket cannot do bearer authentication
-    router.get ('/api/v1/apps/:id/execws',    routes.accesscontrol.websocketAuth.bind(null, accesscontrol.ROLE_ADMIN), routes.apps.execWebSocket);
+    router.get ('/api/v1/apps/:id/execws',    routes.accesscontrol.websocketAuth.bind(null, users.ROLE_ADMIN), routes.apps.execWebSocket);
     router.post('/api/v1/apps/:id/clone',     token, authorizeAdmin, routes.apps.cloneApp);
     router.get ('/api/v1/apps/:id/download',  token, authorizeAdmin, routes.apps.downloadFile);
     router.post('/api/v1/apps/:id/upload',    token, authorizeAdmin, multipart, routes.apps.uploadFile);