force https if scheme is not present