Search API URL consistent with 1.1 docs; force SSL on API endpoints