Are you handling any cookies it throws back at you? It may be using these for Auth?

Have you used a packet monitor to watch what goes down the wire using a real browser??

--
RatArsed