Change Invalid URL to localhost

we do this to prevent MITM attacks