1. Add option to disable redirects. Following a redirect loses the original response (with set-cookie headers required for authentication). You dismissed the idea of following infinite redirects here but maybe we can use -d0 for no redirects instead.
What would you want $urlget() to do if a redirect is sent in this case?
