minor symfony#59080 [Security] Update incorrect form authenticator changelog item (bobvandevijver)

This PR was merged into the 7.1 branch.

Discussion
----------

[Security] Update incorrect form authenticator changelog item

| Q             | A
| ------------- | ---
| Branch?       | 7.1 <!-- see below -->
| Bug fix?      | yes
| New feature?  | no <!-- please update src/**/CHANGELOG.md files -->
| Deprecations? | no <!-- please update UPGRADE-*.md and src/**/CHANGELOG.md files -->
| Issues        | # <!-- prefix each issue number with "Fix #", no need to create an issue if none exists, explain below instead -->
| License       | MIT

<!--
Replace this notice by a description of your feature/bugfix.
This will help reviewers and should be a good start for the documentation.

Additionally (see https://symfony.com/releases):
 - Always add tests and ensure they pass.
 - Bug fixes must be submitted against the lowest maintained branch where they apply
   (lowest branches are regularly merged to upper ones so they get the fixes too).
 - Features and deprecations must be submitted against the latest branch.
 - For new features, provide some code snippets to help understand usage.
 - Changelog entry should follow https://symfony.com/doc/current/contributing/code/conventions.html#writing-a-changelog-entry
 - Never break backward compatibility (see https://symfony.com/bc).
-->

Related to symfony#53851, symfony#57378 & symfony#59079. ~~Whether or not this an actual CVE, I believe this should be removed from the changelog anyways as it does not throw a bad request anymore.~~

~~If we do keep considering it a new feature, it should probably be changed to reflect the correct exception.~~

As discussed, now only an update to note the actual exception being thrown.

Commits
-------

38f8ec2 Fix change log to mentioned thrown exception

Author: fabpot

src/Symfony/Component/Security/Http/CHANGELOG.md

@@ -6,7 +6,7 @@ CHANGELOG
 
  * Add `#[IsCsrfTokenValid]` attribute
  * Add CAS 2.0 access token handler
- * Make empty username or empty password on form login attempts return Bad Request (400)
+ * Make empty username or empty password on form login attempts throw `BadCredentialsException`
 
 7.0
 ---