Logs are accessible without auth headers with alwaysAllowAccess flag

  + Pulls empty auth header check into authorizers
  + Also makes alwaysAllowAccess flag apply to Admin Firehose access.

Signed-off-by: David Julia <djulia@pivotal.io>