simple exim ACL fix: act correctly on DNSBL+authentication

When an (possibly) authenticated user tried to send mail from an address listed on any DNSBL, he was rejected without any chance to authenticate (and prove he's not a spammer).

This rearranges the order of checks so that authentication is possible even from DNSBL'd IP.