What procotol does the VPN component in your router use? Probably either IPSec or PPTP. What you'll need to find out from t-mobile is if their hotspot networks permit IPSec and/or PPTP pass-through.. if they block that traffic then you're out of luck.
Another way to browse securely would be...