additional https functionality with login http redirects to https