diff --git a/httpd/httpd.c b/httpd/httpd.c
index 1d5fadf8..2c67e4c2 100644
--- a/httpd/httpd.c
+++ b/httpd/httpd.c
@@ -348,8 +348,9 @@ __xdata uint8_t *scan_header(__xdata uint8_t * __xdata p)
 			if (is_word_x(session, session_id)) {
 				authenticated = 1;
 				last_session_use = now;
-			} else
+			} else {
 				dbg_string("Invalid session cookie!\n");
+			}
 		}
 	}
 	return p;
diff --git a/test/Makefile b/test/Makefile
index 1f7a63ef..e394aec4 100644
--- a/test/Makefile
+++ b/test/Makefile
@@ -11,7 +11,7 @@
 CC       = gcc
 SRCROOT  = ..
 # -include shim first so __xdata/__code/__banked vanish before any firmware header.
-CFLAGS   = -std=gnu11 -g -O1 -Wall -Wextra -Wno-unused-parameter -Wno-unknown-pragmas \
+CFLAGS   = -std=gnu11 -g -O1 -Wall -Wextra -Werror -Wno-unused-parameter -Wno-unknown-pragmas \
            -Wno-pointer-sign \
            -DRTLP_HOST_TEST \
            -fsanitize=address,undefined -fno-omit-frame-pointer \