[server] fix unittest_security for py3k - use source.binary_to_str instead of str(), helps when the backend returns memoryviews - fixup str vs bytes

bgcolor = '#000000'
stylesheets = ['%s/cubicweb.css' % datadir_url]
logo = '%s/logo.png' % datadir_url
lazy = lazystr('%(bgcolor)s')