Only append length hiding string on HTTPS requests

There's no need to add that extra data on normal HTTP requests.