Use routes for security paths, instead of raw paths

[wouterj]

Q	A
Doc fix?	yes
New docs?	no
Applies to	2.1+
Fixed tickets	#2108

There where 3 articles where the old raw paths where used: book/security, quick_tour/the_controller and reference/configuration/security I haven't changed the quick tour article, because the SE still uses raw paths in their default security configuration file. However, I have updated the book article and the reference.

[weaverryan]

We should update the XML and PHP formats here as well

[wouterj]

@weaverryan I have fixed the issues you mentioned. In cookbook/security/form_login, we use the failure_path and default_target_path. Shouldn't these be updated aswell?

[weaverryan]

Thanks @wouterj! I've made one other small tweak, I think we've covered everything, but this chapters probably will need to be re-read for consistency sometime soon (ideally on the hack day).

[weaverryan]

@wouterj I would assume that failure_path and default_target_path also accept routes, though I haven't personally tried this. We should test that out and then yes, change those as well. If you want to open a separate issue for those, that would be perfectly fine.

[stof]

default_target_path accepts it. I switched it to a route in my project yesterday and it works.