That sounds reasonable. On the assumption that you (complexodus) have control of the test server, try some other operations that don't require authentication, in order to narrow down the problem.