fix access_ticket_verify2() when using non-default webroot
minor code clean-up in access_ticket_verify2()
access: optimization for the webroot ticket patch