Glad to see you've narrowed it down. Can't help you with APC masterswitches. We wern't happy with basic authentication, even when securred by HTTPS. In experimentation with pre-V4.1 hand helds, and Fedora Core 1 Apache servers, we did not have any difficulties.