removed javascript https redirect
unnested privacy-policy
spurious CR
Merge pull request #3 from idiomatic/master

removed javascript https redirect