Fixed host header and added cookie whitelisting