MVC: call initialize() after authentication, which is the same as it was in Phalcon earlier.

This fixes a small regression not being able to access user data during init and prevents executing code before the user is authenticated, although in practice this is only boilerplate in our codebase.

src/opnsense/mvc/app/library/OPNsense/Mvc/Dispatcher.php

@@ -157,11 +157,12 @@ class Dispatcher
         $controller->response = $response;
         $controller->security = new Security($session, $request);
 
-        $controller->initialize();
-
         if ($controller->beforeExecuteRoute($this) === false) {
             return false;
         }
+        /* call initialize() after authentication */
+        $controller->initialize();
+
         $this->returnedValue = $controller->{$this->action}(...$this->parameters);
         $session->close();
         $controller->afterExecuteRoute($this);