Rate limit Browsers which do not send a referer.
Without a referer we are unable to say who is accessing our server.
No referer could be due to some of the following options:
* https accessing http tiles (we have STS is place to avoid)
* Browser Extension blocking referer (eg: uMatrix)
* Site with Referrer-Policy set