[#3276] Trying to further clarify the session storage directory details
improve the serialization of custom user models

(cherry picked from commit 7b34eabe4b506c3e49e4dedbefee66c1612bb83d)
[#3307] Adding an additional note about deserialization issues

(cherry picked from commit 7325ec5044c0339275a9700e767d88707116f79d)
[#3307] Fix thanks to @xabbuh

(cherry picked from commit 38612bc190ab2f97f2fbd3f3bc18a591df153cbe)
Clarifying some details on serialize/unserialize and making it consistent with changes we recently made

(cherry picked from commit f285c5a572ee88e94a9314e152a5075243811d49)

Conflicts:
	cookbook/security/entity_provider.rst
Changed sha1 into bcrypt
[#3356] Fixing ticks that don't work inside a bold and removing extra details in intro area that aren't necessary (you'll need to read the cookbook entry for more details anyways)
[#3356] Changing to use the bcrypt algorithm

Also removing one example (now possible with using bcrypt from the beginning) and related tweaks.
[#3356] Moving serialize and Equatable logic further down for clarity
[#3356] Clarifying when you need a salt

Also filling in other details related to using BCrypt
Update forms.rst

Accessing form values via `vars` property instead of getter. Updated PHP templating examples.
Update forms.rst

Accessing form values via `vars` property instead of getter. Updated PHP templating examples.
merge
Fixed vars as object property, not array
add empty_data option where required option is used
improve explanation of code block for bundle removal and fix typo
add missing code-block directive
add note when forbidding access to anonymous users on custom authentication provider
[Contributing] Clarify the rebase operation

I just mentioned the fact that `push -f` is usually required when rebasing and explicit that the "2.2 when bugfixing" is a follow up on the previous example (Not necessarily explicit at first).
[Contributing] Fix single vs double backtick issues