update safe urls based on https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued/