Remove direct access checks

Issue: https://github.com/kohana/core/issues/508
@lenton this can create a big security risk for the time being. I don't think basing a PR on the future is a good idea. Could you at least secure them for now and in the next pull request where the web directory is implemented remove it again.

That way we won't have any temporary security issues.