fix error handling for update notifications

- use GerritUtil which properly handles errors (e.g. authentication errors)
disable action for anonymous which require authentication