Breaks when used on .htaccess password protected site

I am building a site and I have the root directory protected with an .htaccess file. The taxonomy image module uses the complete url to the image when getting the size of the image (on line 267 of taxonomy_image.module) which breaks since it can't get to the image without a username and password. I notice that you've commented out line 266 which uses 'path' instead of url. Does 'path' work? Can I just uncomment that and comment out line 267? Thanks for your help.