removed strict HTTPS (use your webserver for that)