base auth URL to https