fix carddav when the calendar app is only enabled for specific groups

Since checking if an app is enabled requires a user to be logged in we need to postpone those checks until after the *DAV auth is handled.

Requires owncloud/core#9962