Can you document that we use the tenant host as the default referer ?