XMLHttpRequest works in preview but not in install

Question

I work with Dreamweaver CS5 and preview the HTTP/Javascript Adobe Air application as I create the code.
The application is now in a state that I figured I'd compile the application, install it, and test it.  One problem, one call, which authenticates me to an API fails.
I was hoping that someone could point out the error in my ways.  I'm thinking it's a security thing but can't figure it out.
The code I use is as follows:
var url = "http://open-api.domain.com/authentication.getUserToken.domain";
var vars = "v=3&appKey="+appKey+"&email="+email+"&password="+password;  
var domainCOM = new XMLHttpRequest();
domainCOM.open("POST", url, true);
domainCOM.setRequestHeader ("Content-type", "application/x-www-form-urlencoded");
domainCOM.setRequestHeader ("Content-length", vars.length);
domainCOM.setRequestHeader ("Connection", "close");
domainCOM.onreadystatechange = function() {     
    if (domainCOM.readyState == done) {
        if (domainCOM.status == ok) {
            if (domainCOM.responseText) {
            //do some stuff
            else {
                window.alert('unknown error in authenticationGetUserToken.');
        else {               
            window.alert('Password / Userid combination is not valid.  Please correct and try again.');
domainCOM.send(vars);
return;
It works perfectly and hits the //do some stuff code every single time in preview mode.  It always hits the 'password /userid' combination error when I'm running the application.
Any help would be apreciated.

Answer 1

The header captured was (i edited out specific sitenames, data, etc):
POST http://URL HTTP/1.1
Referer: app:/applicationName.html
Accept: text/xml, application/xml, application/xhtml+xml, text/html;q=0.9, text/plain;q=0.8, text/css, image/png, image/jpeg, image/gif;q=0.8, application/x-shockwave-flash, video/mp4;q=0.9, flv-application/octet-stream;q=0.8, video/x-flv;q=0.7, audio/mp4, application/futuresplash, */*;q=0.5
x-flash-version: 10,1,82,73
Content-Type: application/x-www-form-urlencoded
Accept-Language: en-US,en
User-Agent: Mozilla/5.0 (Windows; U; en-US) AppleWebKit/531.9 (KHTML, like Gecko) AdobeAIR/2.0.3
Origin: app://
Content-Length: 77
Accept-Encoding: gzip,deflate
Host: open-api.URL.com
Connection: Keep-Alive
Pragma: no-cache
v=3&appKey=XXXYYYZZZ&email=XXXYYYZZZ&password=XXXYYYZZZ
This is the raw results of the call based on what I captured in Fiddler2:
HTTP/1.1 200 OK
X-Mashery-Responder: proxyworker-i-XXXYYYZZZ.mashery.com
Content-Type: text/xml
X-Aspnet-Version: 2.0.50727
Server: Microsoft-IIS/7.0
Cache-Control: no-store
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Cp: LVA08
Date: Tue, 24 Aug 2010 00:03:23 GMT
Cteonnt-Length: 74
Vary: Accept-Encoding
X-Original-Content-Encoding: gzip
X-Original-Content-Length: 90
Accept-Ranges: bytes
Content-Length: 74
<?xml version="1.0"?>
<value>xxxyyyzzz</value>
In comparing it to the version that works, the header is different on these lines:
x-flash-version: 10,1,53,64
User-Agent: Mozilla/5.0 (Windows; U; en-US) AppleWebKit/531.9 (KHTML, like Gecko) AdobeAIR/2.0.2  <-- note the adobeAir version change
Accept-Encoding: gzip,deflate  <-- this line doesn't exist in the working call
The response has the following different line(s):
Cp: LVA07 <-- instead of LVA08
Vary: Accept-Encoding  <-- this line doesn't exist in the working call
X-Original-Content-Encoding: gzip  <-- this line doesn't exist in the working call
X-Original-Content-Length: 90  <-- this line doesn't exist in the working call
My guess is that I need to turn off the new 'defaulted' accept-encoding: gzip, deflate but I've no clue how.  I tried adding it to the code with a value of blank (ie: "") but that did nothing.