removed workaround for bug after finding session.enable.phishing.protection=false