Remove HTTP_AUTHORIZATION from META asap

Mitigate risks that it gets loggued/displayed on an error page