InvalidArgumentException: You should define a value for only one of 'csrf_provider' and  'csrf_token_generator' on a security firewall. Use 'csrf_token_generator' as this replaces 'csrf_provider'.

security:
    encoders:
         TotoUserBundleEntityUser: sha512

    role_hierarchy:
        ROLE_ADMIN: ROLE_USER
        ROLE_SUPER_ADMIN: [ROLE_USER, ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH]

    providers:
        main:
            id: fos_user.user_provider.username

    firewalls:
        dev:
            pattern:  ^/(_(profiler|wdt)|css|images|js)/
            security: false

    # Firewall pour FosUserBundle
    main:
        pattern: ^/
        anonymous: true
        provider: main
        form_login:
            login_path: fos_user_security_login
            check_path: fos_user_security_check
            csrf_provider: form.csrf_provider
        logout:
            path: fos_user_security_logout
            target: /
        remember_me:
            # %secret% est un paramètre de parameters.yml
            key: %secret%

     # Firewall pour la partie admin sous Sonata
    admin:
        pattern: /admin(.*)
        form_login:
            provider: fos_userbundle
            login_path: /admin/login
            use_forward: false
            check_path: /admin/login_check
            failure_path: null
        logout:
            path:/admin/logout
        anonymous: true

access_control:
    # URLs FOSUserBundle accessibles à tous les utilisateurs (rôle anonyme) :
    - { path: ^/_wdt, role: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/_profiler, role: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/login$, role: IS_AUTHENTICATED_ANONYMOUSLY }

    # URLs du back-office, accessibles par le rôle admin :
    - { path: ^/admin/login$, role: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/admin/logout$, role: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/admin/login-check$, role: IS_AUTHENTICATED_ANONYMOUSLY }
    # -- fin

    - { path: ^/register, role: IS_AUTHENTICATED_ANONYMOUSLY }
    - { path: ^/resetting, role: IS_AUTHENTICATED_ANONYMOUSLY }

    # Secured part of the site
    # This config requires being logged for the whole site and having the admin role for the admin part.
    # Change these rules to adapt them to your needs
    - { path: ^/admin, role: [ROLE_ADMIN, ROLE_SONATA_ADMIN] }
    - { path: ^/.*, role: IS_AUTHENTICATED_ANONYMOUSLY }