Security issue: imported URLs are stored along with password.

1. Mask the password in logs.
2. Remove origin in newly imported repo.
Last issue remains - the password is passed to git on the command-line, but I'm not sure how to fix that. Also, it's not as critical.
Avoid inline comments.