Bump symfony/security-http from 4.3.4 to 4.3.9 in /api

Bumps [symfony/security-http](https://github.com/symfony/security-http) from 4.3.4 to 4.3.9.
- [Release notes](https://github.com/symfony/security-http/releases)
- [Commits](symfony/security-http@v4.3.4...v4.3.9)

Signed-off-by: dependabot[bot] <[email protected]>