PASS User-added Authorization header with include mode PASS User-added Authorization header with same-origin mode PASS User-added Authorization header with omit mode PASS User-added bogus Authorization header with omit mode