Fixed symbolic-link case in StoRI resolution algorithm

- anonymous users = not allowed sym links
- auth users = verify target vfs permissions (source vfs must be
approachable)