LPS-38724 1.) redirect when company.security.auth.requires.https=true 2.) fix the redirect