Hacks to ensure we don't redirect with auth credential headers

"%j" for body ensure that entire JSON body comes out in the log if one is present... this is a nice debug feature.