Thanks for finding out — however, it doesn't work for me. curl is returning a „Temporarily moved“ header. The returned URL points to the login screen. It looks like authentication with the „stolen“ cookies does not work (anymore).