Some fixes to the security definition object

Corrected RFC reference.
Clarified that URLs can be relative.
Fixed basic auth example.