So we should simply Disable HTTP Referer Check?