fix response to non-https page