When you see streams with authentication, you should always use the URLs before they expire. And you can always capture packets from Windows Media Player using WM Recorder or freeware WebVideoCap.

The auth code is generated on the server side, so I see no sense to research anything about it.