CONSOLE WARNING: line 3: Subresource requests whose URLs contain embedded credentials (e.g. `https://user:pass@host/`) are deprecated, and will be blocked in M59, around June 2017. See https://www.chromestatus.com/feature/5669008342777856 for more details.
Referer should be set for XMLHttpRequest from Workers.

PASS: Sync referer.
PASS: Async referer.