title: Why doesn't unlockedActions override requireAuth in CakePHP?
body: <p>In my Cake 2.3 app, I have an action that's called via ajax. Since I'm using the Security component, I had to use <code>$this-&gt;Security-&gt;unlockedActions</code>, otherwise the action would fail.</p>
  
  <p>However, <code>unlockActions</code> doesn't work when <code>$this-&gt;Security-&gt;requireAuth()</code> is called. Is this a bug? Do I have a misunderstanding of how CakePHP handles security?</p>
  
  <p>Why doesn't <code>unlockActions</code> override <code>requireAuth</code>?</p>