Don't remove basic authentication credentials

This fixes an issue where basic authentication credentials were not included in the sanitized URL.