Fixed in check-in [976c41ca3ade3fea](info/976c41ca3ade3fea) by defaulting to adding Referer:, AJAX header, and fixed POST request.