Apparently fixed as it's now a redirect loop.

what ! this is a huge security hole !