Also mask passwords when we fail to download a module

The password normally gets masked except when cpanm is unable to download the distro:

    # ! Download http://username:s3cr3t@perl.org/authors/id/D/DO/DOY/Try-Tiny-0.20.tar.gz failed. Retrying 

This pull request applies the mask to those error messages as well