upgrade cms to a newer version that uses x-forwarded-proto header to detect HTTPS