Remove initialize() call

SecurityComponent does not implement this method.
Update file comment.
Update Controller & Component tests to remove Controller parameter.

The Controller parameter is not used in all components, it is also
redundant given that $event->subject() exists. Keeping the callback
signatures simple is more important than adding redundant parameters at
this point in time.

Re-enable most of the controller tests. Most do not rely on Models and
can be re-enabled. A few tests are failing as beforeRedirect() is not
complete.
Remove redundant event parameter.

This parameter is now redundant, remove it.
Drastially change how beforeRedirect callbacks work.

Instead of relying on removed event system features, the beforeRedirect
callback now works differently. Each callback will receive the original
URL that the redirect was for and the response object. Any listener can
directly set the location header, statusCode or any other headers they
desire. The exit parameter cannot be altered and will most likely be
removed in the future as exiting from the controller makes a variety of
testing situations harder. This change also simplifies the testing
& behavior of the beforeRedirect callback.

If a beforeRedirect callback is stopped no redirection occurs as in the
past.