Release 2.2.0 (#4359)

* deactivate deprecation logging in prod for now
* fix several deprecations
* enable CSRF for logout
* allow more twig methods and functions in InvoiceSecurity policy

config/packages/monolog.yaml

@@ -1,6 +1,6 @@
 when@prod:
     monolog:
-        channels: ["deprecation"]
+#        channels: ["deprecation"]
         handlers:
             main:
                 type: fingers_crossed
@@ -15,10 +15,11 @@ when@prod:
                 type: console
                 process_psr_3_messages: false
                 channels: ["!event", "!doctrine"]
-            deprecation:
-                type: stream
-                channels: ["deprecation"]
-                path: "%kernel.logs_dir%/deprecations.log"
+# deactivated, because currently there are too many deprecations cause by gedmo and doctrine
+#            deprecation:
+#                type: stream
+#                channels: ["deprecation"]
+#                path: "%kernel.logs_dir%/deprecations.log"
 
 when@dev:
     monolog:

config/packages/security.yaml

@@ -60,6 +60,7 @@ security:
             logout:
                 path: logout
                 target: homepage
+                enable_csrf: true
 
             login_throttling:
                 max_attempts: 5