Basic authentication should not be transitive across redirects to a different origin.
Basic authentication should not be transitive across redirects to a different origin.