add js redirect to https