added security sample

This is a partial implementation for security--the definitions of the security schemes are not complete (see comments in-line, but the association to operations and structure should be working.
Consider these two definitions--oauth2 and apiKey to be aliases. The sedition of which flow is required will live in the not-yet proposed structure inside the hash