FormAuthUnitTestCase testPostDataFormAuth passes even though it should fail. Due typo it redirects to original URL instead of the one retrieved from header resulting in invalid behavior.
The same issue in upstream is tracked in https://issues.jboss.org/browse/WFLY-3621
Created pull request with a fix https://github.com/jbossas/jboss-eap/pull/1517
Because of this issue https://bugzilla.redhat.com/show_bug.cgi?id=1030050 wasn't detected in time.
Verified on EAP 6.4.0.DR2