figuring out https