Do not display tokens in the Mirroring page (#13852)

Created by: flying-robot

Currently we render full clone URLs (including the token) in the Settings > Mirroring page. We want to remove the userinfo portion of the URL, regardless of the current user's role or permissions

Fixes #13852 (closed)