Mask the auth section of the URL