Deprecate features in SecurityComponent

These features are available in CakeRequest now. The CakeRequest
version is improved as it raises more appropriate exceptions.
Update docs for SecurityComponent::requireAuth()
Use constants instead of strings.

Using built-in constants where possible is generally a good idea,
making code less error prone.