[fix] Do not forward 'authorization' header in a development environment