- don't re-write a SourceForge authenticated CVS root into the

anonymous flavor unless the user asks for it on the command line
- decompose SourceForge authenticated CVS roots correctly