it can happen that the http referer is nil when we expect it to be set (for example if the user has a privacy extension enabled