You might save some time by looking at the references to configuration info in the code first.
cheers,
Torben
ns_log Notice "security::locations, locations: $locations"
Reload via APM and then try again.
Check your domain url against the values provided (and shown in the log), specifically the value closest to the one you are having problems with.
That should indicate where the offending data is (hopefully)!