Replace $forbiddenkeys with a stack_cas_security-object in input-validation

and use it to spread the knowledge about units in the question.

Also include logic to automatically declare units at the question variables
should any units inputs or tests be present in the question.