Update to Symfony 4.1 #149 (#160)

* updated to Symfony 4.1 #149
* updated to phpunit 7 #149
* downgrade ocramius/proxy-manager for PHP 7.1 compatibility #149
* fixed symfony deprecations #149
* replaced AdvancedUserInterface with custom user checker
* code sniffer fixes

config/packages/security.yaml

@@ -14,12 +14,12 @@ security:
             security: false
 
         secured_area:
-            # does what it says
-            logout_on_user_change: true
-
             # this firewall applies to all URLs
             pattern: ^/
 
+            # make sure only allowed users have access to their time-tracking
+            user_checker: App\Security\UserChecker
+
             # but the firewall does not require login on every page
             # denying access is done in access_control or in your controllers
             anonymous: ~