Fix checkout of sources when sourceaccess is disabled

The SourceController uses models that require a proper login even on GET.
One example is getting the sources of a package with osc if source access
is disabled.

Signed-off-by: Jan Blunck <jblunck@infradead.org>
sorry, that's not a helper. That's a mixin - I know Adrian doesn't care about that difference either :)