HTTPS is enabled by default and affect on authorization flow