fix https redirect