create https urls in production, regardless if the current request is https