fix up https redirects