Michael Müller : server: Grant the same access rights when req->access is zero in duplicate_token.