AUTH_LOGIN_CHECK is done before DOKUWIKI_STARTED

A user could still bruteforce the passwords even though s/he couldn't
view the login page. Thanks goes to @asheenlevrai