Allow whitelisting certain domains with referrer