need to force disable of http if using https