It seems pretty much you're right.  I've just tested the client against a self hosted site of mine and it's in fact not working - I suppose because of authentication.  I'll be reviewing the best way to solve this.