Think you’ll need the same URL in the Security section, like here:
On local you should be able to remove both these settings though and it should just work.