Referrer-Policy Header Implementation

Preventing sensitive order parameters from leaking in HTTP referrers.

add_header Referrer-Policy "strict-origin-when-cross-origin" always;