configuring the callback to be HTTPS