update config to redirect nossl to ssl in browser, to prevent cors issue