cross-tenant request bug fixed