I've noticed, and reported, a problem in 2.9 where custom headers are lost on requests that get redirected via 302. This wasn't an issue prior to 2.9, so it's definitely something that was broken recently.
I have no idea if that helps or is even related to what you're seeing, greubel, but it seemed worth mentioning.
My Channels: http://roku.permanence.com - Twitter: @TheEndlessDev
Instant Watch Browser (NetflixIWB), Aquarium Screensaver (AQUARIUM), Clever Clocks Screensaver (CLEVERCLOCKS), iTunes Podcasts (ITPC), My Channels (MYCHANNELS)