Align title documentation with current code

Recommend setting the title in the view, not the controller.
Escape vars where appropriate.

reference cakephp/cakephp#4370