Adds referer header spoofing

If you want it, not super required (can set that header [] option). Needed to get around some dodgy iframe "security" heh.