fix: contentFrame.dispatchRequest no longer blindly sets From header from current origin