Fix issue #160, remove auth header on redirect

This fix removes the authorization header when the host
that's being redirected to is different than the host
that's redirecting, if the hosts are the same then the
auth header remains the same.

Tests included.
Remove access var, clean up tests

Per comment by @mikeal removed the references to
originalHost.

Since this is just hostname (not host + port) updated the unit
tests to use localhost ip instead of hostname, also removed
the extra server that's not required.
Revert left over change
Merge pull request #1 from Kinvey/160-redirect-remove-basic-auth

160 redirect remove basic auth