https enforcing fix