HTTPS aware OAuth callback URL