feat(network): remove header on insecure requests

[GeopJr]

if a request is known to be 100% out of instance or doesn't need auth then setting is_insecure should strip any auth headers even if with_account is explicitly set

note: with_account has two use cases:

1. if host is missing from the url it uses the account's instance
2. set auth headers with the account's token

is_insecure will strip the auth headers

maybe should be renamed to with_auth and do the opposite?