Your only option is going to be calling a script. Either using PowerShell script via Execute Process task, or using C# in a Script Task to download it.
For the PowerShell script you would use Invoke-WebRequest
as it supports passing in credentials. A good example of this can be found here. The example from the article:
$Credentials = Get-Credential
Invoke-WebRequest -Uri "https://www.contoso.com" -OutFile "C:\path\file" -Credential $Credentials
To keep from being prompted you can use various ways to encrypt it, just depends on if the password has to be kept secure. If not just modify it to be something like this:
$pwd = ConvertTo-SecureString "MyT0pSecr3tP@ssw0rd" -AsPlainText -Force
$creds = New-Object System.Management.Automation.PSCredential (“username”, $pwd)
Invoke-WebRequest -Uri "https://www.contoso.com" -OutFile "C:\path\file" -Credential $creds