Security issue: imported URLs are stored along with password.

1. Mask the password in logs.
2. Remove origin in newly imported repo.
Last issue remains - the password is passed to git on the command-line, but I'm not sure how to fix that. Also, it's not as critical.
Prefer double-quoted strings unless you need single quotes to avoid extra backslashes for escaping.