I'm having this same problem... I got around it temporarily by setting each user's browser to trust the domain. I hope there's a better solution though.