fixed isSecureUrl