Allow http in-app postbacks in prod (bug 862588)