Use https only if the site was loaded over https