use proper REFERER and HOST headers