Adding 'https://*.app.box.com/api/' to allowedUrlPrefix.plist