Remove auth from URL