bug on force to https for authenticate