use 'redirect scheme' for https redirect