Add support for CSRF.   Check referrer to increase trust of incoming request.