prevent redir from https to http
oops