[fetch] Only append Authorization if none is set (#198)

Currently we happily append `Authorization` headers even though someone might have already set one. Instead, we should just give priority to the custom header.

---
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/198