Drop Authorization headers when redirected to another host.