mikeal/request — pull request #1184 by nylen (2014-10-17 16:00:17+00:00)
Title: Don't forward authorization header across redirects to different hosts

When redirecting to a different host, we should blow away any authorization header. This has caused issues with AWS, with npm install from private GitHub repos (ping @isaacs), and other servers.

Also see prior discussion at #450, #860, #1058.