Referer

Add allowed referers to bypass regular auth