disallow http connections outside of VCR (when VCR is on).