Update book/security.rst

| Q             | A
| ------------- | ---
| Doc fix?      | yes
| New docs?     | no
| Applies to    | all probably (tested on 2.1)
| Fixed tickets | 

login_patch and check_path don't accept routes names only urls