changed core of SecurityAttributes, added a spyspy to verify the output of encoded user-attributes.  And minor change: Renamed some test files