refs #4996 allow redirects to subdomains of known hosts