Strip the .dev from our localhost so squareup doesn't get unhappy without SSL