Serve the VM console page to every user

Console link returned 403 for users without a Frappe session; now serves `/vm_console` to every user, token validates access.