check http-referor before doing logout request