switch all endpoints to https