Use https for the oauth2redirect url as appropriate.