Referer

Add allowed referers to bypass regular auth
Yes, this is the branch that was deployed. Also, I think having explicitly set referrers is more convenient since this machine is also used for staging and other environments (dev if needed) which don't necessarily run on the same domain.