It would appear that this behavior is simply barred from working in captive portals as a security precaution. No files can be downloaded from a captive portal to protect the device integrity. So what I'm trying to do is impossible, as far as I can tell.