some links should be only accessable when a user session is available / not available

[Apfelwurm]

only if logged in:

• /confirmation/pending
• /confirmation/success
• /register/external/complete

only if not in:

• /login
• /register

[Apfelwurm]

This problem is related to the client as well as the api