v7.9.0

• Configuration option to use a different CSRF token manager, instead of Symfony's default one
• Configuration option to retrieve the CSRF token from a header
• Change of execution order in TwoFactorAccessListener to initialize the security token as late as possible and only if necessary