Using referrer field for authentication