This should be `https` since the server already rewrites it from `http`.