security
avoiding problems if using www. as default and then receive a hostname without www