REFERRER: Clarify Origin when Cross-Origin policy wrt protocol upgrades