redirect within HTTPS traffic too