Fix CRSF protection on Chrome, and add check if 'Referer' header