Introduced the securityPolicy member of the Yesod typeclass, added tests...

..., and updated documentation and scaffolding
I'll put together a PR implementing option B, but I probably won't have time for a few days.