security.yml

security:
    encoders:
        AppBundle\Entity\User:
            algorithm: pbkdf2
            hash_algorithm:       sha512
            encode_as_base64:     true
            iterations:           1000
    # http://symfony.com/doc/current/book/security.html#where-do-users-come-from-user-providers
    providers:
        our_db_provider:
            entity:
                class: AppBundle:User
                property: username
    firewalls:
        # disables authentication for assets and the profiler, adapt it according to your needs.
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false
        main:
            pattern:    ^/
            provider: our_db_provider
            anonymous: ~
            form_login:
                login_path: /login
                check_path: /login
    access_control:
        - { path: ^/(login|register), roles: IS_AUTHENTICATED_ANONYMOUSLY } # or whatever roles you use
        - { path: ^/, roles: ROLE_USER } # or whatever roles you use