pass isSecure in options to use https