changed default for SECURE_REFERER_POLICY fixes #2191 (#2192)

* changed default for SECURE_REFERER_POLICY fixes #2191

* switch to origin default

Author: tiftran

app/experimenter/settings.py

@@ -331,7 +331,7 @@
 
 SESSION_COOKIE_SECURE = config("SESSION_COOKIE_SECURE", default=False, cast=bool)
 CSRF_COOKIE_SECURE = config("CSRF_COOKIE_SECURE", default=False, cast=bool)
-SECURE_REFERRER_POLICY = config("SECURE_REFERRER_POLICY", default=False)
+SECURE_REFERRER_POLICY = config("SECURE_REFERRER_POLICY", default="origin")
 
 # Silenced ssl_redirect and sts checks
 SILENCED_SYSTEM_CHECKS = ["security.W008", "security.W004"]