I suggest to include that http_basic in a firewall configuration in app/config/security.yml shouldn't be setted as true.