#610290 by dww and sun: system_run_authorized() shouldn't always drupal_goto() so it can be used in submit handlers.