HTTPS should be requesting the HTTPS version or it will trigger unsecured content warnings