use https where possible

Use https in external links where possible.