https://griddle-reviews.blogspot.com/2022/08/xmlhttprequest-not-adding-header-x.html