fix https oauth