Introduced the securityPolicy member of the Yesod typeclass, added tests...

..., and updated documentation and scaffolding
So should I not make them here, or should I make them in both?  I didn't really investigate how the scaffolding works.