actually redirect https, not just log it. doh