Preserve request headers across redirects

It is customary in many real-world test suites to do something like

   browser.addHeader('Authorization', 'mgr:mgrpw')

and then expect that to take effect for all subsequent requests, even
those that result from a previous request returning a 30x redirect.