Ensure https url for oauth2 callback