Adding HTTP_REFERER to white list

please accept my pull request Myron is driving me nuts. kthx