set https Origin if isSecure.