Sorry I found the reason. Our local security settings adds "HttpOnly" to all the outgoing cookies, which seems to conflict with the internals of AI companion, resulting that AI companion did not send the "AppInventor" cookie when fetching the media files. I removed the "HttpOnly" setting and everything works fine now. Sorry to bother you and many thanks. 
2 Likes