Hmm, Unauthorized makes me think that your sign-in on the main page wasn't shared with the related server. Firefox recently rolled out "Total Cookie Protection." This feature limits how sites can use "third party" or "cross-site" cookies, meaning cookies from different websites than the one you see in the address bar (in this case, "api" is a different server than, say, "www"). You can make exceptions to this feature when needed by disabling Tracking Protection on the site -- repeat as needed for each server that you visit as part of the process of using this service. More info in the following articles: * [[Introducing Total Cookie Protection in Standard Mode]] * [[Total Cookie Protection and website breakage FAQ]] Any difference?