logo in header not being forced to https