allow http on other domains