fix redirect if secure URL config is not HTTPS #71