Redact client_id, client_secret from Octokit::Error

Add redact_url method to redact things, don't show credentials in error logs

Refs #341