curl*: use CURLOPT_USERNAME if libcurl is recent enough