add url auth support to _.wget