make codemirror use https