exclude parts that have different default values

Security component adjustments: fixed comment style, hkdf() and pbkdf2() are now protected, compareString() is now public

Fixes #4114: Added Security::generateRandomHexKey(), used it for various tokens and default key generation

Improved action filter and action execution flow by supporting installing action filters at controller, module and application levels

Fixed phpdoc, removed unit tests for Formatter asRelativeTime that were relative to current time since it was impossible to specify correct expected values