Authentication for portal and routing

Question: If the user starts the app, signs in to the http://www.arcgis.com portal with credentials then requests a route they are not prompted for credentials a second time. But the reverse is not true - if a user starts the app and first requests a route (where they are prompted for credentials) and THEN signs in to the portal to view their content they ARE prompted a second time for credentials. Why?