Allow Controller::startup() to return Response object.

Since Controller::redirect() no longer exits components like AuthComponent return
response object after setting up redirection. The dispatch process is also updated
to account for this change.