[API.Request] if "secure" flag sets to "false" value, then we will check scheme of the hosted page and URL scheme as well