maskUrlCredentials
Masks username and password in a URL string, replacing them with *****.
For example, "https://user:pass@host.com" becomes "https://xxxxx:xxxxx@host.com".
Return
the URL with masked credentials, or the original string if no credentials are present