diff --git a/design/privateheader.php b/design/privateheader.php
index caf5036..bf4d2db 100644
--- a/design/privateheader.php
+++ b/design/privateheader.php
@@ -10,6 +10,7 @@ define('FOOTER_FILE', SERVER_ROOT.'/design/privatefooter.php');
   <meta charset="utf-8" />
   <meta name="userid" content="<?=G::$LoggedUser['ID']?>" />
   <meta name="authkey" content="<?=G::$LoggedUser['AuthKey']?>" />
+  <meta name="referrer" content="same-origin" />
   <link rel="shortcut icon" href="favicon.ico?v=<?=md5_file('favicon.ico')?>" />
   <link rel="search" type="application/opensearchdescription+xml" title="<?=SITE_NAME?>" href="<?=STATIC_SERVER?>opensearch.xml">
   <link rel="alternate" type="application/rss+xml"
@@ -94,8 +95,11 @@ foreach ($ExtraCSS as $CSS) {
   <link rel="stylesheet" type="text/css" media="screen" href="<?=STATIC_SERVER."styles/$CSS/style.css?v=".filemtime(SERVER_ROOT.STATIC_SERVER."styles/$CSS/style.css")?>" />
 <?
 }
+?>
+<script src="https://code.jquery.com/jquery-3.2.1.min.js" type="text/javascript"></script>
+<?
 
-$Scripts = array_merge(array('jquery', 'global', 'ajax.class', 'jquery.autocomplete', 'autocomplete', 'tooltipster'), explode(',', $JSIncludes));
+$Scripts = array_merge(array('global', 'ajax.class', 'jquery.autocomplete', 'autocomplete', 'tooltipster'), explode(',', $JSIncludes));
 foreach ($Scripts as $Script) {
   if (trim($Script) == '') { continue; }
   $Async = (in_array($Script, ['jquery','global','ajax.class'])) ? '' : 'async';