rename SwaggerAuth to SwaggerSecurity

- SwaggerAuth is still kept, backward compatible
- SwaggerSecurity is fixed for 2.0 objects.
move app.root to app.raw for 1.2 test case