[cookbook][custom_auth] Fixing cookbook entry to create a fresh, authenticated token. See symfony#614

Author: weaverryan

cookbook/security/custom_authentication_provider.rst

@@ -201,8 +201,10 @@ the ``PasswordDigest`` header value matches with the user's password.
         {
             $user = $this->userProvider->loadUserByUsername($token->getUsername());
 
-            if ($user && $this->validateDigest($token->digest, $token->nonce, $token->created, $user->getPassword())) {
-                $token->setUser($user);
+            if ($user && $this->validateDigest($token->digest, $token->nonce, $token->created, $user->getPassword())) {            
+                $authenticatedToken = new WsseUserToken($user->getRoles());
+                $authenticatedToken->setUser($user);
+
                 return $token;
             }