adds HTTP_REFERER to white list