Use routes for security paths, instead of raw paths

| Q             | A
| ------------- | ---
| Doc fix?      | yes
| New docs?     | no
| Applies to    | 2.1+
| Fixed tickets | #2108 

There where 3 articles where the old raw paths where used: `book/security`, `quick_tour/the_controller` and `reference/configuration/security` I haven't changed the quick tour article, because the SE still uses raw paths in their default security configuration file. However, I have updated the book article and the reference.