removed the forcefull redirect form https to http. now, all website can be browsed with https, it is just some pages (based on SECURE_PREFIX) that can't be browsed in insecure way