more checks in security_test, EvalModel.expr

Few more checks added to EvalModel.security_check(), including .format() and .format_map(), Thanks to Nagizaaz Shaik

.security_check() and .expr() now methods of EvalModel (backward-compatible).

README.md updated