fix URL's so they work also under https