[session] move security constant out of the class
There is no reason for it to not be global. This will ease it use by
``Transaction object``.
debian/tmp/usr/lib/PY_VERSION/site-packages/cubicweb/web usr/lib/PY_VERSION/site-packages/cubicweb
debian/tmp/usr/share/cubicweb/cubes/shared/data usr/share/cubicweb/cubes/shared
debian/tmp/usr/share/cubicweb/cubes/shared/wdoc usr/share/cubicweb/cubes/shared