class Rack::Protection::RemoteToken

def accepts?(env)
  super or referrer(env) == Request.new(env).host
end