Yes it is the same URL. We believe it is a secure service. Our developers seem to be having issues generating tokens but even when they manually generate a token and use it in the program like
AGSCredential *cred = [[AGSCredential alloc] initWithToken:@"token_generated_manually" referer:@"http://ourserver"];
NSURL *url = [NSURL URLWithString:@"http://ourserver/arcgis/mobile/content/MobileWeb/Maps"];
layer = [AGSDynamicMapServiceLayer dynamicMapServiceLayerWithURL:url credential:cred];
lyr = [self.mapView addMapLayer:layer withName:@"Gas_Stations"];
They receive in the function failedLoadingLayerForLayerView for the baseLayer and in the failedLoadingLayerForLayerView for the second layer identical errors saying:
Error Domain=NSCocoaErrorDomain Code=500 "Unknown error occurred" UserInfo=0x86950a0 {NSLocalizedFailureReason=Unknown error occurred, NSURL=http://ourserver/arcgis/mobile/content/MobileWeb/Maps?f=json&token=token_generated_manually, NSLocalizedDescription=Unknown error occurred}