In Symfony 3.2 we removed `app.security`, but we added `app.token` in https://github.com/symfony/symfony/pull/19991