Somewhere in the script: # Patron is not authenticated yet But it's not correct, we set 'number' and 'id' in session, the patron has filled in their credentials, they are correct, but the second authentication step is not passed yet.
Well, bug 28787 is not pushed yet. Adding the patch there.