Explicitly set the Sec-Fetch-User header value

[jugglinmike]

The normative note which precedes the algorithm clearly states that this header is only set when its value is true. This detail would be more evident if the relevant algorithm step were worded in terms of the literal value.