don't send login info in the query string #63

Thanks for the report @owenversteeg !