301 redirect instead of an error for non-https