fix allowedReferers *