url.c: fix parse_url_login() OOM handling