In Drupal 7 /user is the login page, blocking with Apache blocks other /user paths

See https://git.drupalcode.org/project/disable_login/-/merge_requests/1

maneesha binish → made their first commit to this issue’s fork.

I have pushed a commit to the existing issue fork branch 3381784-in-drupal-7, which is already part of the active Merge Request !1.

The original patch in hook_menu_alter() correctly applied the disable_login_check_access() callback to both /user and /user/login. However, upon testing, I observed that an anonymous user who accessed the login page using the correct secret key was still unable to access /user, which is not the intended behavior.
I have updated the logic inside disable_login_check_access() to:

1. Allow logged-in users to access /user.
2. Restrict access for anonymous users unless the correct secret key is provided in the URL query string.

No .htaccess rules are required — handled entirely within Drupal’s access system.
Verified on a clean D7 site. No regressions observed.