fix(security): stop curl_command from carrying the bearer token across a redirect

fix(security): stop curl_command from carrying the bearer token across a redirect #695