All Cognitive Language services should have same security definitions

[heaths]

All the Cognitive Services - Language pillar services should support both apimKey and AADToken security definitions as you see in questionanswering.json, and in the same order for array members like security. I think the discrepancies between these might be causing some issues with validation and, at the very least, are misleading since both shared key and AAD auth mechanisms are supported.