http requests are force redirected to https