use the AWS_S3_SECURE_URLS setting