Add Referer header validation