Don't leave UserSession URLs without scheme