Update common-plugin/src/main/java/org/gatein/sso/plugin/RestCallbackCaller.java

encode the callback URI, and by default obfuscate any errors to prevent plaintext passwords from appearing in the server log