First pass at switching away from HTTP_REFERER for upload_files cap map in IE9

See #354