Filter import_url params because they may contain auth information. Fixes #14199