No REFERER check when opening a console ou jupyterlab from a notebook

[lsignac]

Command palette allows users to open a new Python console or a new Jupyterlab window.
This new window is openend in a new tab (even if the notebook is accessed as an iframe).
The new window URL (https://nbhosting.inria.fr/nnnnn/consoles/console-1-XXXX for a console window)
can be accessed with another browser instance or from another IP without any REFERER check.