** Changed oauth end-points to use https 
** Changed https redirects to be ignored when operating in custom domain