forcing to replace http with https