adding symfony/security to composer.json and running update