The authorization header was not dropped by redirect strategy as expected.

The authorization header was not dropped by redirect strategy as expected. #1262