fix #916: allow HTTPS to access custom yubico url