strip username/password