added login page alone to HTTPS