Added stub and notice about using the referer header to infer the origin of a bad request.