check HTTP_REFERER is present