Update SecurityPlugin.php

Allow guest to access only certain actions in controller. Currently all actions are allowed if controller is in $publicResources