Some services use Authorization header [0] to pass upload credential
data. This avoids the token being exposed in server logs and is allowed
by XEP-0363 since version 0.5.0.
This change adds support for headers allowed in XEP-0363: Authorization,
Expires and Cookie.
[0]: https://xmpp.org/extensions/xep-0363.html#request
Status code can't be less than 200 and greater than or equal 300 at the same
time. Using || instead of && marks all uploads that do not have 2xx status code
as "failed".
