Policy based on AD usernames or groups not working on HTTPS sites