added security sample

This is a partial implementation for security--the definitions of the security schemes are not complete (see comments in-line, but the association to operations and structure should be working.
makes total sense: if there is a url there can be a description of what it's for.  this way, it can be inferred from the context (root, operation, definition) as well as statically there for a tool to pickup a render a desc/link combination.