http doesn't automatically redirect to https. idk if that's related to pav's issue or not (it might be), but it's also an independent issue of its own.