A security researcher has demonstrated how websites can track user behaviour by building an online fingerprint from their Google Chrome extensions.