Use sanitized url (without HTTP Basic Auth fragments) in `[p]findcog` command.