inconsistent HTTPS settings