use https and xml suffix instead of accept header