fetch: Send referer and npm-session headers