do not redirect to `https` on API