The session cookie should not be passed to the operation as a parameter. See the the second comment in the 'run()' method below, and comments in AuthenticatorActivity about the creation and initialization of a WebDAVClient instance.