be more last on referer matching - only require beginning to match

Some browsers include trailing slash, some do not