Allow https postback URLs