add a lock icon for https request