fixed typo in comment

also, the comment says "allow any secure requests" but the example URL isn't HTTPS -- not sure if this is correct