Investigate using Fetch standard for HTTP requests

[zombiezen]

Following up from #255, it may be worth it to ensure that zb's HTTP resource fetching complies with the Fetch standard. This would also add the Fetch Metadata Request Headers, making it easier for servers to implement CSRF protections.