hack: add referer to the session