Add url rewriting to secure mirror, reactivate validation.