Fixes #4920: `yii\filters\auth\CompositeAuth` should not trigger error as long as one of the methods succeeds
Fixes #3177: `yii\filters\auth\CompositeAuth` will send out challenges from all auth methods