How Retain authorization header when a redirect happens to a different hostname? [closed]