Do not HTTPS redirect for /api/