Auth credentials support for URL data source

[washort]

We want to connect to private S3 buckets without exposing credentials in the URL used in a query. Adding support to the URL data source for an Authorization header would allow this.

[rafrombrc]

An initial version of this was pushed to production in M12, but we're revising the code and still need to merge to master.