Except I have found that many times that $ENV{HTTP_REFERER} has been blocked by a filtering proxy more frequently than cookies have been disabled.

-Waswas