pass http basic auth credentials thru a link in a less obvious way