fixed a bug with 'www.' causing cross-site security measures to trigger on opera