prevent redir from https to http