Cleanup AuthComponent and Authorize classes.

mapActions(), action() methods were removed from BaseAuthorized. They should be
added to appropriate class in Acl plugin. BaseAuthorized::controller() has been
removed. ControllerAuthorize::controller() provides the required getter/setter.
Move Security.salt value check to WeakPasswordHasher.
Update / fix test cases.
Merge pull request #4424 from ADmad/3.0-auth-mapactions

Cleanup AuthComponent and Authorize classes.