Support optional whitelist of referrer domains

[premasagar]

This will prevent overload of the service by third party developers. (This is also issue 21 on NSQL - so the implementation can be shared)

[premasagar]

Or rate-limiting per individual domain / IP address.