Use HTTPS if it's in use in the browser