* forbid base url overrides by default and allow in alpha environments
* override base url via separate mvc event listener
* print effective fidis base url in footer