Some enhancement

[dvlp123456]

1. Fix to ensure security of operation object can override top-level security;
2. Explicitly require to write required: true when define a path parameter in the specification;
3. Some code optimizations.