Add docs for accessing the security token from the Twig AppVariable

[javiereguiluz]

In Symfony 3.2 we removed app.security, but we added app.token in symfony/symfony#19991

[javiereguiluz]

Closing it as fixed by #7808.