Reworked so that authorization parts are only used when the transport is https