Simulatable Security For Quantum Protocols