support AAD
redirect http to https
support switching tenant