authenticated users are in ipfw so we'd need something like 'ipfw sync' but it's still missing
https://forum.pfsense.org/index.php?topic=60725.0
Stefano Busanelli seams to have a workaround but I didn't see it:
http://lists.pfsense.org/pipermail/list/2012-November/003202.html
edit: it's feature #97 for future releases
https://redmine.pfsense.org/issues/97