> We start with a page
> <http://user:pass@site.com/widgetdir/index.html>
> it will lose the pass, so it ends up like
> <http://site.com/thingamagig/index.html>
> and goes unauthorized.

This is because httrack considers the password valid for 
site.com/widgetdir/, but NOT top level directorites.

The only workaround is to add a fake URL before the real 
URL:
<http://user:pass@site.com/fakepage.html>

HTTrack will the "see" user:pass as creditentials for the 
site.com/ path