2
Cookies, which store authentiication information, are domain-based... As I see - you change host's domain, thus - old authentification ignored for new hostname.
I have almost the same problem in case of multisiting with common userbase, and have only ideas how it can be solved (by dirty hack), not ready to use solution