detect https properly...