allow not verified referrer to receive applications