Test that 'referer' is not included in Access-Control-Request-Headers in a preflight request. Should print PASS.