fixed http -> https redirect