--disable-web-security flag is no longer needed