Clear old Authorization header before retry

I have found that queued failed requests retain the Authorization header that was originally sent with them. As a consequence a user can never successfully re-enter credentials because failed requests persist in failing. Removing the Authorization header from requests before retrying them seems to work.