make sure the username / password is stripped from the URL when doing lookups for credentials
Merge pull request #376 from doorkeeper/fix_credential_lookup

make sure the username / password is stripped from the URL