Use URL.Redacted() to avoid security scanner warning

[dirkmueller]

This is entirely a false positive as the code was handling this properly before, but we can use the right function..