wrap urlopen call to catch 401 and retry using netrc, if available