In dbConfig, shadow credentials are also stripped from shadow URL, fixes issue #400

and added into shadowConfig as Username and Password