Switched from regexp to using existing URI class to strip user/password.