added a default server rule to handle host header attacks
fixxed member password view splash