added security sample

This is a partial implementation for security--the definitions of the security schemes are not complete (see comments in-line, but the association to operations and structure should be working.
security schemes are defined here and given an alias.  For this example, there is `oauth2` (with an empty definition) and `apiKey`, with the type `header` and name `api_key`