Merge branch '5.2' into 5.x

* 5.2:
  [Security] Fixes typo in experimental authenticators

Author: OskarStark

security/experimental_authenticators.rst

@@ -582,7 +582,7 @@ would initialize the passport like this::
             // ... validate no parameter is empty
 
             return new Passport(
-                new UserBadge($email),
+                new UserBadge($username),
                 new PasswordCredentials($password),
                 [new CsrfTokenBadge('login', $csrfToken)]
             );