Fixes #287. Disallow redirects by referrer if the referrer was not served up from the same server as the front end