Update application route mixin to support deep links when not authenticated.

Prevent event handlers from being assigned more than once in the
beforeModel hook. This could happen when the very first route
transition was aborted to redirect to the login route.

Aborted transitions are no longer 'lost' due to the
sessionAuthenticationSucceeded action being called a second time
after the attemptedTransition was already cleared.