add user/password handling to curl