don't redirect secure connections to SSL