github tokens displayed in DEBUG output

[stephenmathieson]

i feel like we've tried to avoid this in the past so people are able to share their logs without giving away potentially sensitive information...

$ DEBUG=* make
[ ... ]
  duo-package visionmedia-debug@2.1.3: fetching from https://{TOKEN}@github.com/visionmedia/debug/archive/2.1.3.tar.gz +1ms
  duo-package curl -v -L -H "User-Agent: duo-package" https://{TOKEN}@github.com/visionmedia/debug/archive/2.1.3.tar.gz +2ms
[ ... ]