force https on install