I think I've found the real problem here:
See "Access to password protected content fails via the reverse proxy" at the bottom of the Wiki page:
"If the content on the web servers is password protected then you need to tell the proxy to trust your web server with authentication credentials."
So I need to configure Squid accordingly.
I hope this thread will help others solving such a problem quicker than me.