make sure we user https