allow for redirecting users to https