Don't log the password in the DB URL

Passwords in logs make security teams twitchy.  Fixes #2896.