authenticate referrer, facebook etc.

merged back some extra options