Make Web API use HTTPS by default
Update CHANGELOG