Add username and password params to sharing sites

Take the username out of the site url. This helps us avoid info leakage
and makes the UI easier for admins to configure