Don't force SSL on non-HTTPS URLs