Tvheadend

Hi,

Using TVH 3.4 stable on a Rasbian wheezy.
If I go to access control and set up

 *  *  0.0.0.0/0,::/0

(with all privileges selected)
then I can stream just fine from within the browser, but the interface is open to the whole internet.
If I use

 myuser  mypass  0.0.0.0/0,::/0

(with all privileges selected)
then I can use an external client, like TVHClient on my Android to stream and it works just fine. The log says

Identified as user myuser
[ myuser ]: Welcomed client software: org.tvheadend.tvhclient (HTSPv8)
[ myuser | org.tvheadend.tvhclient ]: Privileges raised

But if I try to stream from within the webUI, I get a 401 Unauthorized:

/playlist/channelid/1 -- 401

Any thoughts? Shouldn't the new stream launch with user:pass@ip:9981/stream/channelid/1 ?
I'm using the VLC plugin for Firefox.