add https for /auth too