Removes HTTP Basic Authentication credentials from `location.href` in Webkit.