Https-Only: CORS and MixedContent tests

Bug 1659505