Strip user/password from URL in error message.