Add rel=noreferrer to external links for privacy