PHP Decode

public function initialize()
    {
        parent::initialize();

	    if (
	    	strpos($this->request->getParam('prefix'), 'api') === false &&
		    $this->request->getParam('prefix') != $this->getUrlPrefix() &&
		    file_exists(ROOT . '/src/Controller/Custom/' . Configure::read('company_folder') . DS . $this->getRequest()->getParam('controller') . 'Controller.php')
	    ) {
		    //Create new url:
		    $queryParams = $this->request->getParam('pass');
		    $url = UrlHelper::build([
				    'prefix' => $this->getUrlPrefix(),
				    'controller' => $this->getRequest()->getParam('controller'),
				    'action' => $this->getRequest()->getParam('action')
			    ] + $queryParams);

		    //Custom controller:
		    $file = "App\Controller\Custom\" . Configure::read('company_folder') . '\' . $this->getRequest()->getParam('controller') . 'Controller';
		    $obj = new $file;

		    //Reflection class to determine where is action (method) defined:
		    $reflector = new \ReflectionMethod($obj, $this->getRequest()->getParam('action'));

		    //If it's original (not overriden) method, do not redirect:
		    if(get_class($this) != $reflector->class) {
			    header("Location: {$url}");
			    exit;
		    }
	    }

        $this->loadComponent('RequestHandler', [
        	'viewClassMap' => ['xlsx' => 'Cewi/Excel.Excel']
        ]);

        $this->loadComponent('Flash');

        $this->loadComponent('ProfitAndLost');

        $this->loadComponent('Search.Prg', [
	        // This is default config. You can modify "actions" as needed to make
	        // the PRG component work only for specified methods.
	        'actions' => ['index', 'lookup']
	    ]);

	    $this->loadComponent('TinyAuth.AuthUser');

	    // todo: refactor this shit :)
        if ($this->request->getParam('prefix') === 'api') {
            $authConfig = [
	            'ADmad/JwtAuth.Jwt' => [
		            'parameter' => 'token',
		            'userModel' => 'ApiUsers',
		            'fields' => [
			            'username' => 'uuid'
		            ],
		            'queryDatasource' => true
	            ]
            ];

	        $this->loadComponent('Auth', [
		        'authenticate' => $authConfig,
		        'unauthorizedRedirect' => false,
		        'authError' => false,
                'authorize' => [
                    'TinyAuth.Tiny',
                ],
		        'storage' => 'Session',
	        ]);
        } else if ($this->request->getParam('prefix') === 'custom/wem/api') {
            $authConfig = [
	            'Form' => [
		            'userModel' => 'ClientZoneUsers',
		            'fields' => [
			            'username' => 'username',
			            'password' => 'password',
		            ],
	            ],
                'ApiUsers' => [
                    'parameter' => 'token',
                    'userModel' => 'ApiUsers',
                    'fields' => [
                        'username' => 'uuid'
                    ],
                    'queryDatasource' => true
                ],
                'ADmad/JwtAuth.Jwt' => [
                    'parameter' => 'token',
                    'userModel' => 'ClientZoneUsers',
                    'fields' => [
                        'username' => 'uuid'
                    ],
                    'queryDatasource' => true
                ]
            ];

            if(isset($this->request->getHeader('FrontendType')[0]) && $this->request->getHeader('FrontendType')[0] == 'onboarding_old') {
                $authConfig['ADmad/JwtAuth.Jwt'] = [
                    'parameter' => 'token',
                    'userModel' => 'WsClients',
                    'fields' => [
                        'username' => 'id'
                    ],
                    'queryDatasource' => true
                ];
            }

            $this->loadComponent('Auth', [
                'authenticate' => $authConfig,
                'unauthorizedRedirect' => false,
                'authorize' => [
                    'TinyAuth.Tiny',
                ],
                'authError' => false,
                'storage' => 'Session',
            ]);
        } else if ($this->request->getParam('prefix') === 'custom/haberl/api') {
            $authConfig = [
                'Form' => [
                    'userModel' => 'ClientZoneUsers',
                    'fields' => [
                        'username' => 'username',
                        'password' => 'password',
                    ],
                ],
                'Allrisk' => [
                    'parameter' => 'token',
                    'userModel' => 'ApiUsers',
                    'fields' => [
                        'username' => 'uuid'
                    ],
                    'queryDatasource' => true
                ],
                'ADmad/JwtAuth.Jwt' => [
                    'parameter' => 'token',
                    'userModel' => 'ClientZoneUsers',
                    'fields' => [
                        'username' => 'uuid'
                    ],
                    'queryDatasource' => true
                ]
            ];

            $this->loadComponent('Auth', [
                'authenticate' => $authConfig,
                // todo: dorobit ACL
//                'authorize' => [
//                    'TinyAuth.Tiny',
//                ],
                'unauthorizedRedirect' => false,
                'authError' => false,
                'storage' => 'Session',
            ]);
        }
        else if ($this->request->getParam('prefix') === 'custom/investin/api') {
	        $authConfig = [
		        'ADmad/JwtAuth.Jwt' => [
			        'parameter' => 'token',
			        'userModel' => 'ApiUsers',
			        'fields' => [
				        'username' => 'uuid'
			        ],
			        'queryDatasource' => true
		        ]
	        ];

	        $this->loadComponent('Auth', [
		        'authenticate' => $authConfig,
                'authorize' => [
                    'TinyAuth.Tiny',
                ],
		        'unauthorizedRedirect' => false,
		        'authError' => false,
		        'storage' => 'Session',
	        ]);
        } else {
            $authConfig = [
                'Form' => [
                    'fields' => [
                        'username' => 'username',
                        'password' => 'password'
                    ],
                    'userModel' => [
//                        'IntermediaryPersons',
                        'Intermediaries',
                        'Users',
                    ],
                ],
                'Azure' => [
                    'fields' => [
                        'username' => 'ms_email',
                    ],
                ]
            ];
	        $this->loadComponent('Auth', [
		        'authenticate' => $authConfig,
		        'authorize' => [
			        'TinyAuth.Tiny',
		        ],
		        'unauthorizedRedirect' => ['controller' => 'users', 'action' => 'login', 'prefix' => false],
		        'authError' => false,
		        'storage' => 'Session',
	        ]);
	    }

	    // Allow everything to be displayed
//	    $this->Auth->allow();

        /*
         * Enable the following components for recommended CakePHP security settings.
         * see http://book.cakephp.org/3.0/en/controllers/components/security.html
         */
        //$this->loadComponent('Security');
        //$this->loadComponent('Csrf');
    }