Use original URL for exceptions, not the one containing authorization, fixes #1722