The HTTP Authentication fails whenever a Task developer has placed Velocity variables in the URL string along with the standard username and password variables. This occurs because the "authentication scope" contains the unresolved variables and the actual scope has the variables resolved by Velocity.