[session] move security constant out of the class
There is no reason for it to not be global. This will ease it use by
``Transaction object``.
Document: cubicweb-doc
Title: CubicWeb documentation
Author: Logilab
Abstract: Some base documentation for CubicWeb users and developpers
Section: Apps/Programming
Format: HTML
Index: /usr/share/doc/cubicweb-documentation/index.html
Files: /usr/share/doc/cubicweb-documentation/*.html