added security sample

This is a partial implementation for security--the definitions of the security schemes are not complete (see comments in-line, but the association to operations and structure should be working.
security schemes are applied to this `get` operation.  For this operation, one must satisfy EITHER oauth2 (scopes user:read, user:write) OR apiKey