Converted the authentication scheme from using cgi parameters to using http basic authentication. This appears to be the more general solution since the decoder_control.cgi script doesn't seem to accept the authentication parameters but still requires authentication to control the camera.  Using basic HTTP authentication seems to make this interface work.