Fix #14036. Remove user/pass from ajaxLocation. Close gh-1340.