Addendum, the forms-based authentication does not work - this particular site
requires you to fill in a form (login/password), but it's not using http
auth.

I think what would be needed is a complete proxy that just captured everything
in the live interactive download stream (ie: as you accessed it).