XSTS authentication currently fails, but that's likely to do with configuration outside the app code.