Prevent authentication data being written to disk

[jonasmalacofilho]

Avoid having them saved on .git/config by not using clone and explicitly passing URLs to fetch.

Note: check it they aren't saved to the reflog anyway or, if that's still the case, fix it too.