Remove Security.level setting

This setting is obsolete, and has been removed in cakephp 2.2.6

See: cakephp/cakephp@51946ff8f
Partial revert of be9286d.

Instead of removing 'value', the correct fix should be to set 'default'.