making all calls to the api https to support projects that enforce https access -- still works with http projects