removed javascript https redirect