Found potential source of problem: My system VLC is version 2.0.8, and the "password" field in the Lua HTTP module wasn't added until version 2.1.0. It seems impossible to actually update VLC on my system (they don't provide packages, and 2.0.8 is the version in the repositories), so I suppose this won't work - unless there's some sort of workaround for older VLC?