HTTPS enabled by defaut and affect on authorization flow