This should be done with a cookie set with the call to get the user credentials from my.jobs. That is how it is specified in the ticket. If the microsite were running in SSL, which a few do, then this will fail.