Introduced the securityPolicy member of the Yesod typeclass, added tests...

..., and updated documentation and scaffolding
What's the advantage of having a new, separate method instead of just changing the implementation of `makeSessionBackend` to make the correct call in the scaffolding? The disadvantage of the current approach is that we now have a method whose behavior can be completely overridden by mistake by replacing `makeSessionBackend`.