check for auth object at certain functions

This is a follow up on the previous patch to disable authtentication without
disabling ACL on backend problems. It fixes a few errors that might occour
in this rare situation.

darcs-hash:20070627194910-7ad00-de5ac10e0d36ecf8906c080e1d3dc1b2fd85b45d.gz