removed javascript https redirect

the webserver can and should enforce these protocol redirects.