Specify an url to exclude from context (e.g. "http://localhost:8180/bodgeit/logout.php").
That ensure that the scan will be done in authenticated way