Updated security.zep with fixes and new functionality #10142
Updated security.zep with fixes and new functionality #10142

submitted #10142 to 2.0.x branch

checkToken function makes sure that tokenKey exists in session, if not provided

 Added a utility function destroyToken to be used when checkToken
returns true

Added a 3rd variable to checkToken
destroyIfValid, which removes token key and value from session

Moved token key and value session ids as protected properties
Zaszczyk/cphalcon,Zaszczyk/cphalcon,Zaszczyk/cphalcon,Zaszczyk/cphalcon