Security fix - remove user credentials from URL parameters.

Removed the JazzHub user credentials from being passed in the URL as parameters.  They will continue to be passed in the JSON request body.  The credentials can be viewed in logs and is a critical security issue.