Support for redirecting requests to trusted hosts including sensitive headers

[mdecimus]

Hi,

This PR allows a custom Policy to include sensitive headers when redirecting a request. This change is backwards compatible as the default behavior is still to remove all sensitive headers. To follow a redirect request to a trusted host, users need to use the Attempt::follow_trusted method instead.

All tests are passing but please let me know your thoughts.

Thanks.