Access Control: fix login (#475).

Login works also with an open DM installation.

An open DM installation is one with
    dm4.security.read_requires_login=false
    dm4.security.write_requires_login=false

Close ticket 475.