better way to recommend HTTPS