handle proxying to http (non-https) servers correctly