Use config_get_global for global configuration values

This provides optimal performance, as well as ensuring that there is
no chance of a user managing to find a way to get one of the 'secure'
configuration options set in the database level.
Why do we consider allow anonymous login and anonymous login user name secure?  It would actually be useful for a tool to check if a target bug tracker supports anonymous login and use the anonymous user to connect and show data.