Fixed HEAD method secure

Fixed: HEAD method sent Authorization headers