[security] TokenFactory accepts urls as targetPath and afterPath.
Merge pull request #121 from Payum/security-token-factory-accept-url

[security] TokenFactory accepts urls as targetPath and afterPath.