Account for www or not on hostnames

[andymcbee]

Currently the safelist check checks the host exactly as the user entered in the DB vs exactly as it appears in the host request header

This will create a bad user experience if the user has a www. domain and enters no www.

Set business rules:
Only store non-www domains in the DB. Create a db function that checks if a domain starts with www. each time, and reject it if so.
Always remove leading www from the host, prior to checking if it is valid.