Update Security.php

don't see any reason to put any values in $publicResources, if we skip it in this cycle.
for example: when I wish to change access to session/register as privarte and rest actions as public - is't possible