Move Shield::Model to "shield/model"

Shield::Model is so good. It will be nice if it can be used in apps
that don't use a session handler.