Allow https requests, and respond with https in the origin header