subscriber to provide for beaker https-only sessions