hardcoding https because behind firewall, requests are all http