option to allow http redirects to foreign domains