Look for an XAuth authentication config both in the first and the second round