Headers properly spoofed, request appears to be coming from a browser :)