Remove direct access checks

Issue: https://github.com/kohana/core/issues/508
i agree with @acoulton this should be merged quickly. leaving the security message in logs, or replacing it with `<?php die(); ?>` is a good solution.