conditions for secure only io
improved requireWww logic to only apply to house.config.site.url and not from other accessible urls