remove insecure http path