removed http:// to support secure login