Hacks to ensure we don't redirect with auth credential headers

oops... rebase error... will bring this back