Fix checkout of sources when sourceaccess is disabled

The SourceController uses models that require a proper login even on GET.
One example is getting the sources of a package with osc if source access
is disabled.

Signed-off-by: Jan Blunck <jblunck@infradead.org>
aehm. why so complicated? Why not just raise instead of return false and leave the lambda ?