Implement set referer restriction (on Fastly first)

Change-Id: I42f009a693c996c36842d42b45c62c59d42cb575