Support per-window private browsing

Fix #11