Fix passing options across domains via https