Perhaps I should make the new HTTP::Request that gets created by follow() somehow inherit the credentials from the initial request?

Maybe have the option to specify the request object in the follow/get so you could do:

$agent->follow($link, request => $agent->req)
[download]

Then again, it's never been a problem for me. Maybe make the semantics of req a little more explicit in the docs?