secure is now redirecting 301 back to normal