Revert ":only_path=>true prevents redirect host hijacking"

This reverts commit 97a8dc8e4bcd063ec531aa1baa31e62ac6062ff2.