when capabilities return that there is a /database/info handler - it's required to use it, instead of /meta/cp_databases. the reason is that security cookie can't be sent with /meta/ request by-default.