fixed https:// authentication