[session] move security constant out of the class There is no reason for it to not be global. This will ease it use by ``Transaction object``.

cubicweb-web: embedded-javascript-library usr/share/cubicweb/cubes/shared/data/jquery.js