Secure parameter to client is back, scheme:http/https