#488 manually checking fir https in ouath2 urls