referrer checking for all methods