add cloudfront.net to safeDomain