Add curlOpts to fetchurl

So the derivation can change curl options while downloading stuff.  E.g. to provide custom passwords in private nix deployments.