[curl] redact effective URL

as noted by @topfs2, the original PR failed to redact the URL before logging it.