Referer must have scheme http:// or https://