Move web_profiler.toolbar.listener to boot method

When uses SecurityServiceProvider you have to boot the application before register WebProfiler, moving the registration of the listener seems to solve the problem, I guess this is because the listener access to the request, so the application should be booted before.

Related to #3 and #5