See owncloud/android#1674 for details.
From the symptoms it looks like basic auth is happening for the curl calls, but the credentials aren't available yet in the session. Maybe that part of the code runs too late.
This means that potentially any client that doesn't support cookies will not work properly with the "save in session" mode.
CC @Xenopathic @jvillafanez