initialize() needs to abort for anonymous users if requireAuthenticatedUser is true

[davidjoy]

Currently if requireAuthenticatedUser is true and the user is anonymous, we begin the login redirect process but don't actually abort initialization. Application code that depends on there being an authenticated user will then have unexpected behavior, most likely causing a flash of an error page prior to redirecting to login, which isn't a great experience.