Referrer origin or IP-based rules for accessing API endpoints