add redirect to secure protocol