Add header check to middleware

[EcoGabe]

With the current way the request is being checked, this middleware will clash with any service using a parameter named "code" as a part of their OAuth flow. Checking if the referer is https://l.instagram.com/ will avoid this problem.