force https for https layer, no extra https sever