removed securoty.checkRouteRights event (authorization only through ROLE/RIGHTS) - added security.init event for advanced authentication