found solution, base url, proto was being picked up from incoming requesst itself, now since our tls termination was at loadbalancer incoming proto was set to be http hence it rendered http url in response page.
Setting correct x-forwarded-proto and x-forwarded-port solved the issue.
In my case
x-forwarded-port: '443'
x-forwarded-proto: https