Most likely it isn't a username/password but an authenticated URL... https://foo.bar.netflix.com/(UUID-OR-SIMILAR) where that is resolved to a resource, and the user authentication is valid for X hours from start...

There's no need for a plain username+password to be used... it's just an authentication token as the resource or part of the url.