remove unused http
use output filtering in case the xss filter scrambles the input again