Allow AuthComponent::$unauthorizedRedirect to be an url.
Closes #3494