It could become an issue especially when form_login is used, since it requires One of the solutions is to configure your firewall to use http_basic in the test .