prefer_ssl is an absolute redirect