allow tus client to support https