Merge branch '6.4' into 7.0

* 6.4:
  CS: typo fix
  [Security] make secret required for DefaultLoginRateLimiter

Author: fabpot

DependencyInjection/Configuration.php

@@ -860,7 +860,7 @@ private function addAssetMapperSection(ArrayNodeDefinition $rootNode, callable $
                             ->prototype('scalar')->end()
                             ->example(['*/assets/build/*', '*/*_.scss'])
                         ->end()
-                        // boolean called  defaulting to true
+                        // boolean called defaulting to true
                         ->booleanNode('exclude_dotfiles')
                             ->info('If true, any files starting with "." will be excluded from the asset mapper')
                             ->defaultTrue()