Use base url in refer header checks ( seems to be causing issues )