Limit 20 authorization attempts.

We use one count for both redirects and authorization attempts. This
seems like good enough policy.

Closes https://github.com/square/okhttp/issues/960
Merge pull request #1256 from square/jwilson_1230_followup

Limit 20 authorization attempts.