Don't use accept header for fingerprinting

It varies depending on what browser expects to find behind an URL.
Different headers are sent for images etc.