double up on http, https is inconsistent (cert issues?)