Port to the new Authenticator-based Security
Mostly shifting things around:
- Move from AbstractGuardAuthenticator to AbstractAuthenticator
- Instead of implementing UserProviderInterface create a similar interface that just does what we need (load a user)