The plugin gets the script name based off of the filename, however if the config file <name> tag is saved without an extension then the API call will fail.

plugin sends API config scriptName=script.js but the <name> tag only has a script.

Change the functionality to not search the directory for authentication scripts but rather parse the xml file for available authentication scripts. Extract the file path and test for existence.