cloudflare causes redirect loop if https required, so don't require it