use ssl/https as default vURL secure mode