strip login information from links