fixes #81: config: restricts the protocol of conf.path within http and https