mod_oauth: No ACL check on authorize URL; just check if logged in

(cherry picked from commit fb98182886314fed824ba6fb9523ef001ee00356)