Don't handle the redirected request until it's actually been resent.
Make sure we clear the auth header on redirect.