Implements issue 1124. The canonical implementations of pyramid.security...

... Authorization APIs now live on the request object. This change is backwards compatible.