Use routes for security paths, instead of raw paths

This PR fixes #2108

There where 3 articles where the old raw paths where used: `book/security`, `quick_tour/the_controller` and `reference/configuration/security` I haven't changed the quick tour article, because the SE still uses raw paths in their default security configuration file. However, I have updated the book article and the reference.