PR: #2426 - Security fix for when using auth headers with lookalike origins
Author: @lissy93
Commit: 3e7e4928360fc99386593aca499a390e2af6cf43