> this would also reject HTTP clients that are not browsers
Why? I can send any headers from a client I make.