[DX] Ability to authentication a User directly

| Q             | A
| ------------- | ---
| Bug fix?      | no
| New feature?  | yes
| BC breaks?    | no
| Deprecations? | no
| Tests pass?   | yes
| Fixed tickets | #11158
| License       | MIT

Simple usage example:

```php
class LoginController extends ContainerAware
{
    public function loginAction()
    {
        $user = new User('norzechowicz', 'password123');
        $this->container->get('security.login_manager')->loginUser('firewall_name', $user);

        return new Response();
    }
}
```
Can you use the `security.authorization_checker` and `security.token_storage` instead? I don't think features should contain deprecated code. From 2.6 on, class names are no longer in parameters for newly added services.