changes to ocnfig files to force users to https