CORS userinfo redirect handling


PASS Disallow redirect with userinfo (user:pass@) 
PASS Disallow redirect with userinfo (user:@) 
PASS Disallow redirect with userinfo (user@) 
PASS Allow redirect without userinfo (:@ is trimmed during URL parsing) 
PASS Disallow redirect with userinfo (:pass@) 
PASS Allow redirect without userinfo (@ is trimmed during URL parsing)