NXP-13706: correctly handle authentication when doing cross-domain requests