transaction.security and position.security should be Security() object instead of str

[hezhao]

transaction.security and position.security currently are only assigned as str of CUSIP number, instead it should be a Security() object, so that more useful ticker symbol can also be obtained. I see that ofx.security_list already parses a list of Security() objects, it should not be difficult to create a lookup map with CUSIP as key and Security() object as value.

ofxparse/ofxparse/ofxparse.py

Line 644 in 3236cfd

transaction.security = tag.contents[0].strip()

ofxparse/ofxparse/ofxparse.py

Line 601 in 3236cfd

position.security = tag.contents[0].strip()

[bzbarsky]

In particular, the docs at https://github.com/jseutter/ofxparse/blob/master/README.rst already claim that this is a Security object.