Composer installation instructions updated for 2.5

Cake is installed to a different directly, contrary to the previous documentation.
Merge pull request #1381 from sydnerdrage/patch-1

Composer installation instructions updated for 2.5
Update security.rst
Merge pull request #1382 from hervethouzard/patch-2

Update security.rst