cubicweb-rememberme #2408373 Authentification on http should be impossible when https is activated [open]
Make sure you always get on https when logged in. Browsing the http frontend should be the equivalent of "anonymous" browsing.
I can't reproduce right now, but I got logged in on http://www.cubicweb.org after using rememberme
|done in||<not specified>|
|closed by||<not specified>|