--- a/pyramid_cubicweb/login.py	Tue Jun 28 09:44:08 2016 +0200
+++ b/pyramid_cubicweb/login.py	Wed Jun 01 17:27:29 2016 +0200
@@ -51,6 +51,7 @@
             "Authentication failed. Please check your credentials."))
         request.cw_request.post = dict(request.params)
         del request.cw_request.post['__password']
+        request.response.status_code = 403
         return login_form(request)
 
     headers = security.remember(