Tried the following workaround-possibility, which DIDN'T work:

adding several times the same URL prefixed each by a different
Username/Password-combination to the URL-List... just the first one is
actually used...