Make UserSession use https scheme if no scheme is specified