Add test case for secure_filename

I lifted this straight from the example in the docstring but that should
be sufficient.
Fix secure_filename on 3.x