added referrer header locking