add setting to use https (enabled by default)