Typo in installation.rst

line 253: All access_control settings happens in security.yml so it should be #app/config/security.yml