--- a/README	Thu Mar 24 14:09:29 2016 +0100
+++ b/README	Wed May 11 11:27:50 2016 +0200
@@ -43,6 +43,12 @@
 
 See the documentation of `Pyramid Cubicweb`_ for more details.
 
+.. Warning:: If you want to be able to log in a CubicWeb application
+             served by pyramid on a unsecured stream (typically when
+             you start an instance in dev mode using a simple
+             ``cubicweb-ctl pyramid -D -linfo myinstance``), you
+             **must** set ``cubicweb.auth.authtkt.session.secure`` to
+             ``no``.
 
 Secrets
 ~~~~~~~