make sure openlayers comes from https