fix: auth_protocol should be https