tests reflect new default to HTTPS over HTTP