--- a/pyramid_cubicweb/tests/test_login.py	Tue Jun 28 09:44:08 2016 +0200
+++ b/pyramid_cubicweb/tests/test_login.py	Wed Jun 01 17:27:29 2016 +0200
@@ -40,6 +40,11 @@
         self.assertIn('pauth_tkt', cookies)
         self.assertIsNotNone(cookies['pauth_tkt'].expires)
 
+    def test_login_bad_password(self):
+        res = self.webapp.post('/login', {
+            '__login': self.admlogin, '__password': 'empty'}, status=403)
+        self.assertIn('Authentication failed', res.text)
+
 
 if __name__ == '__main__':
     from unittest import main