Override Twig security to not whitelist property access

DEPLOYMENT: We must require vendor/autoload.php earlier,
from settings.php, now that we're introducing dependencies
in top-level scope.

Change-Id: I5fe17a4cfd2013478c0cb17de4795844af358bb0
Merge "Override Twig security to not whitelist property access"