The global settings I had for security were requiring that I authenticate twice to get at the eXist JNLP, which didn't make sense, so I've limited authentication to the actual articles.