Bugs in content types

Hello, 

since one of the last updates, we don't get our videos to play successfully. 
Interactive videos created before the update still work. 

We thought it's solved by setting up CORS correctly, but it's still not working.
Our videos are protected by a basic HTTP Authentication using .htaccess but the dialog for the authentication does not appear, causing a 401 (Authorization Required) in the browser console. 
It seems that the compatibility with the basic authentication is broken since the CORS update. 

I am just walking my first steps with H5P and I am really exhited about the possibilities. My first trial is a drag & drop question and I am just struggling about the number of results being showed at the end of the task. In my trial there are six draggables but the results never show more than five. You can try here - place 6 draggables in the dropzone and finally click "Überprüfen":

https://h5p.org/node/569517

As I couldn't find any hint to this limitation anywhere in the documentation: where is my mistake?
Thank you!

We have been experieicng issues with the Flash card content type.

Detailed steps to replicate the issue: