Hide Username and Password in URL

I don't blame them. Username and password in the URL is a pretty basic security mistake. e.g. when you're passing via a proxy. After all the URL is going too be logged somewhere... In your history etc.

The only way you can mask it is by changing the application that's insecure enough to insist on user/pass in the URL for a decent one.