Log referrer on CSRF problem

There's a chance that this could help debug CSRF problems when they
occur.