Canonical URL is always non secure.