* Fixed issue mentioned in https://github.com/umbraco/Umbraco-CMS/issues/13836
Now surface controller requests always has higher priority than other. So if this is both a surface controller request and a virtual page request, it will execute the surface controller.
* Moved some login into private methods
* More clean up
* Clean up
* Only handle valid candidates
