--- a/cubicweb/web/views/basecontrollers.py	Fri May 20 11:32:23 2016 +0200
+++ b/cubicweb/web/views/basecontrollers.py	Thu Sep 11 14:22:02 2014 +0200
@@ -25,6 +25,7 @@
 from warnings import warn
 
 from six import text_type
+from six.moves import http_client
 
 from logilab.common.deprecation import deprecated
 
@@ -85,6 +86,7 @@
             raise AuthenticationError()
         else:
             # Cookie authentication
+            self._cw.status_out = http_client.FORBIDDEN
             return self.appli.need_login_content(self._cw)
 
 class LoginControllerForAuthed(Controller):