[2016-12-22 14:12:03] security.INFO: Populated the TokenStorage with an anonymous Token. [] []
[2016-12-22 14:12:03] security.DEBUG: Access denied, the user is not fully authenticated; redirecting to authentication entry point. {"exception":"[object] (Symfony\Component\Security\Core\Exception\AccessDeniedException(code: 403): Access Denied. at /home/vince/Dev/btee-sa-web-app/vendor/symfony/symfony/src/Symfony/Component/Security/Http/Firewall/SwitchUserListener.php:125)"} []

security:

    role_hierarchy:
        ROLE_ADMIN_PORTAL: ROLE_USER
        ROLE_ADMIN_APP: [ROLE_ADMIN_PORTAL, ROLE_ALLOWED_TO_SWITCH]

    providers:
        fos_userbundle:
            id: fos_user.user_provider.username_email

        auth_token_user_provider:
            id: app.auth_token_user_provider

        admin_app:
            memory:
                users:
                    "%admin_app_user%": { password: "%admin_app_password%", roles: ['ROLE_ADMIN_APP', 'ROLE_ALLOWED_TO_SWITCH'] }

    firewalls:
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false

        admin:
            pattern: ^/adminapp
            provider: admin_app
            switch_user:
                role: ROLE_ADMIN_APP
                provider: fos_userbundle
            form_login:
                csrf_token_generator: security.csrf.token_manager
                login_path: security_login
                check_path: security_login
                always_use_default_target_path: true
                default_target_path: adminapp_company_index
            logout:
                path: app.admin_app.logout
            anonymous:  true

        main:
            pattern: ^/
            switch_user:
                provider: fos_userbundle
            form_login:
                provider: fos_userbundle
                login_path: fos_user_security_login
                csrf_token_generator: security.csrf.token_manager
                success_handler: app.form.handler.login_success

            logout:       true
            anonymous:    true

    access_control:
        - { path: "^/$", role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: "^/admin/", role: ROLE_ADMIN }

        - { path: "^/adminapp$", roles: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: "^/adminapp/", role: ROLE_ADMIN_APP }
        - { path: "^/adminportal/", role: ROLE_ADMIN_PORTAL }