Hide password in URL and Engine __repr__

Fixes #2821