Added Security to session api as requested in #785
Storing passoword history of user and validation for user's email and username
Moved security tests to lms also
add two FEATURE flag overrides to enable the security features
remove unnecessary settings overrides (because they are 'feature flags')
Merge pull request #22 from edx-solutions/security_enhacements_785

Security enhacements 785