fix url.parseConfig dumping auth onto the wrong object