Encode user name and password

In the common case this will do nothing, but for our internal apps
where we're checking authentication based on user input, encoding
makes sure that we have well-formed URLs (even if they won't
actually access anything).