disallow redirects in http client (#1037)