Update security.php

no longer needed to include core because of autoload