using urls which are insensitive to http vs https