Fix for import_url fields on projects containing third-party credentials

Fixes https://dev.gitlab.org/gitlab/gitlabhq/issues/2658 and fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/13955

• Cleanup migration that deletes import_url showing credentials
• Prevent import_url to contain these credentials - use encrypted field instead.