updated twig function app.security to app.user