Add X-Request-From custom header to improve security