s3: Move check_access to cgi.c, its only user