In one embodiment, a method includes receiving a first encrypted request from a client device. The request includes a request for access to a resource corresponding to a first uniform resource locator (URL). The method also includes routing the first encrypted request to the first URL; and sending a first response to the client device from the first URL. The first response includes a redirection instruction to a second URL, and the second URL is an unsecured URL. The method also includes intercepting an unencrypted request from the client device. The unencrypted request includes a request to access a resource corresponding to the second URL. The method also includes sending a modified version of the unencrypted request to the resource corresponding to the second URL. The modified version of the unencrypted request includes information identifying the client device.