Specify protocol in production to avoid redirect

Closes #314