fix simple referer check