OK -- apparently we use different meaning/terminology for re-INVITE -- it is commonly used for an INVITE that is sent after the call is established, but you used here for the retry of sending the initial INVITE with the credentials.
I pushed a patch, try with master branch and if all ok I will backport. It might be that the helper header was not added at the right position, which it is tried to be fixed with the patch.