modified login-window. #3

if not referer, don't show message