Security patch release

Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

What's Changed

• fix: don't forward secure headers to 3th party by @jimmywarting in #1453

Full Changelog: v2.6.6...v2.6.7