vcs: restructure authorization check This is a pure refactoring, except for some changed debug log messages. With this change, we simply return early if anonymous (= default user) access is enabled, which should help overall readability. (Diff becomes clearer if whitespace changes are ignored.)