Set req.ref
deal with exceptions
limit only http or https url can push