Personal access tokens echoed to screen in URLs

[cpswan]

Describe the bug
We added the option to supress the echoing of personal access tokens (PATs) when initially pasted, but those tokens are later formed into URLs that are echoed to the console.

To Reproduce
Steps to reproduce the behavior:

1. Go to https://youtu.be/zNShWuKdWMQ?t=533 - see that token isn't echoed by prepare.sh -s
2. Go to https://youtu.be/zNShWuKdWMQ?t=848 to see token echoed to console as part of the URL

Expected behavior
Tokens should not be echoed to console (by not being placed into URLs in the way they are at the moment).

Screenshot
If applicable, add screenshots to help explain your problem.