Do not forward 'Content-Length' header with authorization requests.

Also reduces the number of headers that are forwarded.
Fixes #8.