stop logging upload/download urls

...as they may contain credentials

[finishes #79557732]