use wss:// if page was loaded via https