url: add some defensive asserts on expected incoming types

Our type handling is a nightmare here, and we're loading passwords to
do network IO, so we can afford to be potentially-slow but pedantic
here.

Differential Revision: https://phab.mercurial-scm.org/D5734

mercurial/url.py

@@ -58,6 +58,8 b' class passwordmgr(object):'
         return self.passwddb.add_password(realm, uri, user, passwd)
 
     def find_user_password(self, realm, authuri):
+        assert isinstance(realm, (type(None), str))
+        assert isinstance(authuri, str)
         authinfo = self.passwddb.find_user_password(realm, authuri)
         user, passwd = authinfo
         if user and passwd: