Oops, let is dynamically scoped, which doesn't let
url-request-extra-headers stay bound inside url-retrieve.