allow localhost redirects with config value