allow http -> https redirects on profile links. skip checking for http redirects if there is an exact match for the URL
auth codes are valid for 60 seconds because the provider may require 2fa which takes more time
compare usernames instead of URLs which should help fix http/https errors when your site links to http://twitter.com/username for example