Hum, I'm not sure what's going on but the whole thing works as intended on my side...
I'm still going to check if I can find out why the authentication doesn't work on your side