Don't log passwords in Couchbase server URLs

* Username/password components are stripped out of the URL on startup
* Username/password can be specified as separate JSON properties named
  "username" and "password".
Fixes #137