This comment doesn't really explain anything..
Either remove or actually write it out "Disable download url when credentials are required. Use newer tools to have this support. See JBIDE-16765"