To see bug just hit http://localhost without credentials. Expected: error page with 403 Result: 404 page from default proxy (cannot find /error page)