Some functions in some controllers override parent functions without calling parents. Should be a simple one-line addition to the beginning of each child function, such as:

parent::beforeRender();

This is particularly important in functions like beforeRender, where menuAuth() is called to generate permissions for rendering the site-wide menu.