Don't use FallbackServer

Let’s find out if the fallback server hack is necessary at the IOP.
Logging tweak
Validate endpoint URL and SecurityPolicy