same-origin
This should show no referrer / hidden