leave browser choose between http/https to avoid insecure mixed content