Unset Cookie and auth headers to prevent default VCL from forcing a pass.